Agree that GP's tone was off, but it kinda rubbed me the wrong way too that OP said the GDPR got worse and then goes ahead ans mentions embedding Google fonts as the first thing. Like you can't even be arsed to self-host static assets and rather expose your visitors/customers to the almighty spying kraken. So while I'm sick and tired of cookie banners, I have little sympathy in this specific case.