There's a lot more nuance to the GDPR. It's perfectly possible to use cookies and not need a banner. Our industry's use of banners is just a passive aggressive reaction to being told to respect our users.