Re: GDPR - "All cookies are on by default. "
This is explicitly in breach of the regulations regarding consent. If you only get to exercise the right of consent after the thing you might withhold consent for has already happened, that's an actionable breach.
Unfortunately your chance as an individual of getting the ICO to act on it is almost nil.