> Has anyone been taken to court for violating GDPR because they didn't put tell their users that they'd be serving up cookies?

It can already be quite expensive to make rejecting the cookies too difficult: https://www.bbc.com/news/technology-59909647

After that Google fortunately turned their monstrosity of a UI maze into a single click.