> if you don't do shady shit your site doesn't need a popup asking for consent.

This what I have been explained. Any sort data sharing, like introducing Google Analytics in your website and you need a disclaimer.