Nothing's been official published though, so this is largely a kite-flying exercise.

You don't need a pop-up to use cookies on your site. You (quite rightly) need to get consent in some form if you're to track my (or your) behavior and sell that to rando third-parties.