Not true. You don't have to consent to set a cookie. It depends on what the cookie does. Gdpr actually doesn't care about technicalities like cookies, but about privacy. So if you achieve the same tracking using other techniques (like Etag) that needs consent as well.