On my personal blog, I use a cookie policy plugin (Cookie Notice & Compliance for GDPR / CCPA) that, in combination with a caching plugin (LiteSpeed Cache) does something a bit strange: it only asks for cookies once a visitor views a second page on my website.
So, if a visitor lands on a page from Google, reads an article, and goes away, they might never see a cookie banner.
And the Google Analytics tag is only added when confirming the cookies.
This behavior is fine with me, but others might not approve of it.