[hangs head]
We shouldn't need cookie popups.
Ever.
GDPR does not specify you need cookie popups.
It specifies you need *consent* to collect private data.
"What private data?" you ask. All the crap which goes to Google Analytics.
You don't need a cookie popup if you don't use intrusive analytics.