they're not the only one at fault with this. every. fucking. single. website with ads has this kinda bullshit. but anyway
extremely evil to hide the 600 ad company tracking cookies under the "store information on the device" category which you can't reject, and then hide the actual "reject everything" button as a link next to the cookie/privacy policy links. EVIL.
all thanks to our freaking incompetent EU parliament not mandating HOW accepting or rejecting cookies should be formatted
I really wish the EU had solved this by mandating an API (using HTTP headers maybe) where websites declare their cookies and the categories they belong, and the actual management is done via your browser, the only place where this actually makes any sense. This would've eliminated all the problems with dark patterns because the cookie manager's appearance would've been controlled by the browser, which has no incentive to pull this kind of bullshit.
With that said, the EU actually is pretty strict about when consent is considered valid, and that means a lot of dark patterns are non-compliant. For instance, it must be as easy to revoke consent as it is to give, and that's not the case here.