Oh ma dey have popups. We need dem too! Haha, we happy!
The regulations came along, but nobody told marketing how to do their job without the cookies, so every business site keeps doing the same thing they were doing, but with a cookie banner that is hopefully obtrusive enough that users just click through it.
Your choice to use frameworks subsidized by surveillance capitalism doesn't need to preclude my ability to agree to participate does it?
Maybe a handy notification when I visit your store asking if I agree to participate would be a happy compromise?
You could use localStorage for the purposes of tracking and it still needs to have a popup/banner.
An authentication cookie does not need a cookie banner, but if you issue lots of network requests for tracking and monitor server logs, that does now need a cookie banner.
If you don't store anything, but use fingerprinting, that is not covered by the law but could be covered by GDPR afaiu