We need it everywhere, we get those gdpr forms because sites don't differentiate at all.

GDPR requires opt-in consent, so simply not displaying the cookie notice is functionally equivalent to rejecting permission.