This is why I think that the GDPR is such an important law not just for the things it covers but because it formalizes the notion of iformed consent for computer interactions - specifically requiring that saying no has to be as easy as saying yes.