Comment by whstl

It definitely is.

My experience with GDPR lawyers is that they treat every "cookie" as requiring consent purely because of lack of information and difficulty in fully assessing the full picture.

In every other field, lawyers have to work together with experts. Technical experts must engage with the lawyers. This here is a failure from both sides.