Ask HN: GA for simple sites. Is JS Opt-In required for GA under GDPR?

Assume we are talking about basic static websites, no forms etc. Is it necessary to implement a JS Opt-In before sending any hits to GA? Or is using GA's anonymizeIp=true enough and the JS Opt-In/Opt-Out is not needed in this case?