I thought that GDPR was meant to make clumsy opt-ins like this a thing of the past.

The design pattern, “tick here to opt out” should be banished to the waste bin of history.