Couldn’t you make it so that cheats are working but just disqualify you from leaderboards?

That’s weird. Works for me both through the embedded browser in Voyager and Safari directly (with adblocker enabled)

Is there a reason to keep this structure other than „we’ve always been doing it like that“/backwards compatibility?

The GDPR is a regulation (that’s what the R stands for), not a directive. Directives must be transposed into national law by the member states, while regulations apply directly