I generally think of obtrusive cookie consent popups as a kind of #maliciouscompliance revenge from villains who are sore about GDPR protections.
This is a US based org so they probably have no idea what they are doing around PII data other than what's required by US law and even then.