Because the alternative is to just accept all or accept none; the publishers do not want an accept none by default because that means they get no relevant data anymore. The consumers do not want accept all because that's what the GDPR is about in the first place.