> I'm well aware cookie-less analytics does not require consent
Tangent, but cookie-less analytics may also require consent. It's about PII, and cookies are just one mechanism to tie information to a person.
For example: browser fingerprinting doesn't use cookies, but serves the same purpose.