The GDPR is concerned with using cookies or storage for tracking users without their consent, not with using cookies or storage as such. You don't need to ask for permission to use cookies (or similar techniques) in general – only when using them for evil. GitHub wrote a blog post [0] on this a few years ago.

Most cookie banners try to conflate the different uses of cookies to trick users into consenting to the tracking the law is meant to protect against. They are essentially the equivalent of a restaurant asking you "Knife Consent: This restaurant uses knives for 1) cutting vegetables and 2) removing your organs to sell on the black market. CONSENT TO ALL?"

[0] https://github.blog/2020-12-17-no-cookie-for-you/

Why do you think prompts are necessary? If you don't send any data to third parties or let them store data on the users device you don't have to prompt anything GDPR related.

In this context they probably mean browser permissions, like notifications or camera/mic access.