Is https://www.europa.eu also malicious compliance? Because what on earth does the EU commission need a cookie pop up for?

And yet there it is. Maybe the law is flawed?