GDPR literally prohibits the sale of user data and tracking without user consent (because yes, you want to give people the possibility to opt in for a variety of reasons).
GDPR has literally nothing to do with cookie popups. That was, and is, adtech
I think they are saying GDPR did not ban websites from noisily asking for consent and trying to trick you into giving consent.
My job was building cookie walls in response to GDPR. It might not have been the “intent” but it certainly was the consequence of that law.
prohibits [...] without user consent
that's what causes the popups.
it should prohibit it outright, consent or not.