GDPR requires companies to offer a “only neccessary cookies” option that is easily accessible. Anytime you find a site that works as you’ve described you can and should report them.

Also, there are plenty of options for blocking those popups and/or auto selecting only neccessary.