Actually they are. It was ruled that if you can accept all in one click, you must be able to reject all in one equally easy, equally prominent click, or you're violating the law.

Ha nice! They should start to enforce then, because what you get is "accept" and "configure", and if you select the latter here starts the click galore.

They do enforce, but only if they already dislike you for other reasons.

See their cases against Meta, for example.

There's also basically nothing they can do again foreign websites.