
If GDPR only protects people with EU passports, then it’s not universal rights - it’s privilege with a privacy logo.
And what do you think would happen if EU tried to enforce their laws in an interaction between two parties that both aren’t in the EU? If we did it, why shouldn’t any other country try and do the same? Better read up on Chinese law before you next do business with a company in, idk, France. Sound good?
It’s not about passports either. Move to Vienna or Prague and you may have better luck.

the user can simply choose not to read the article, so there’s an option where they don’t get fucked.
We are rapidly nearing a point where you can’t read online news from any major (ergo “widely considered somewhat credible”) source without one of those schemes. So I’d argue that the alternative is to just not get access to online news, and that may be considered too much pressure to still consider consent as voluntary.
I happen to think it is, and indeed the GDPR sees it the same way. For EU residents. They have to delete your data if you ask them to, no special form requirements.
I may have forgotten my password, they may require additional personal data to let me log in again (which is why my PayPal account is still not deleted) their shitty page might be not loading in my browser of choice, or they recently decided I may not visit it with an ad blocker. It’s just a hoop to jump through to try and make people sigh and just not bother. In OP’s case they want to avoid additional third party tracking on the site, and that’s 100% valid.