I block both.

Tracking isn't really legal without consent, though. If a page tracks visitors without explicit consent the site owner is breaking the GDPR.

I strongly disagree, they're little more than pointless nagware designed as a fig leaf over the gaping privacy issues on the modern web. While I get the intention, it was clearly designed by people who didn't grasp the concept of alarm fatigue and they're usually full of truly obnoxious dark patterns which have nothing to do with informed consent.

I block them all and it massively improves the user experience of the web.

I don't consent to tracking, like, ever. So the proper way to deal with this is to auto-deny and not show up the popup.