perhaps make cookies require a permission, just like access to location, access to mic, etc. and the browser would let you auto-set

except the most popular browser's maker needs them cookies for their core business..  

 Ya it hurts advertising but if they want privacy for all I don’t see a way around it. Alternative is just to get rid of the law entirely and go back to individuals managing their own tracker blockers