The only necessary cookies would be a session cookie for that domain which doesn't need a popup under the GDPR.

I always use the inspect tool to just remove the popup. Interacting with it could be considered consent.