The next time anyone on HN says "GDPR should've been a setting in the browser", I'll just point them to this. This is what browser vendors are making as a default setting.