First time I see GDPR violation this brazen. While writing this comment I finally figured out how to reject consent (clicking on “Purposes” and manually deselecting each purpose).
I double checked with remote debugging, the button is not just hidden in CSS; it’s missing entirely: