The pop-up is only necessary if you engage in shady tracking nonsense. GDPR does not mandate a pop-up for cookies that simply allow the site to function. Essentially, it's like blaming the flashlight for having made the rats scurry across the kitchen floor.