The truth is every single website with Google Analytics and no consent screen is in violation so I imagine whoever is in charge of enforcing GDPR has long ago decided to pick his battles.