Another working idea from me would be that if someone really hates cookies, and somehow manages to live over consequences. then these should be just disabled in the browser side, either globally or per site. Server-side cookie warning solution is prime sample of wasteful privacy theater, nothing more.