[the8472]

Things that are technically necessary to facilitate functions requested by the user like shopping carts or login tokens are exempt under clause 22 of the ePrivacy directive. Don't set any other cookies and you won't need to ask for consent.

Politicians aren't forcing websites to set more than the strictly necessary cookies, which require consent. It's marketing/advertising that does.