It does mandate cookie banners. The client I worked for on the last project got fined because they were missing a cookie banner.

The solution is much simpler - ban targeted ads. The entire purpose of collecting user data is to deliver targeted ads.