GPC Opt Out: UX Fails or Malicious Compliance?

California's CCPA now requires websites to display confirmation when honoring a user's Global Privacy Control (GPC) opt-out signal. Many cookie consent platforms like OneTrust are implementing this requirement in confusing ways — showing an opt-out confirmation while still presenting an 'Accept All Cookies' button that overrides the GPC signal when clicked. The author questions whether this is poor UX rushed to meet the new rule, or deliberate dark-pattern design (malicious compliance). The ideal implementation is a simple, passive notification with no further action required from the user.