No, it’s the website’s fault. You only need explicit consent if you’re tracking users beyond what your service obviously requires to function, the problem is these sites are stalking you.
And if it’s even slightly harder to decline than to accept they’re likely not in compliance anyway so it’s definitely not the EU’s fault.