Just use a browser plugin that rejects everything by default. Sure, the UX could have been better, but I really don’t see the issue. Is it that some companies find it harder to exploit users’ privacy, or that they’re being forced to reveal how they’re spamming people?