What I hate about EU laws is they tend to word these things like this.

People act shocked when it leads to unintended side effects, but companies legal teams are just telling them they have no idea how a judge will interpret these broad wordings in regards to their business.

People say this fixes "future loopholes" but as you see with the cookie banner, it just leads to every company assuming the worst case scenario.

Going back years of conversation on cookie banners you'll see a constant argument on when they're required or not precisely because it's not defined explicitly.