I believe the first one at least is mandated by law.
The banners are a fig leaf for behavior that violates the spirit of the GDPR, creating an aggravation where the simplest way to dismiss them is by agreeing.
Any site that doesn't offer a button to reject the tracking (with no more stops than angreeing) and still function as expected without the tracking, is in violation of the law.
The banner is required every time there is processing of personal data where consent of required, whether that processing happened thanks to cookies or thanks to any other technical means (1px gifs, JavaScript fingerprinting, etc)
Imagine a world where you don't need to click on anything because cookies are no longer being used for large scale tracking.