what other option is there? To mandate browser source code that implements cookies in a lawful way?

And where is the broad coalition of "don't be evil" browser vendors and websites that proudly claims "we don't track you" and that would have made such laws unnecessary?