[thedevindevops]

Sounds like that might fall under the Strictly necessary cookies category for which they are not required to obtain consent for.

[malux85]

The choice whether to login or not is not “strictly necessary” because you do what all other sites do - serve them the logged out content until they login.

This cookie not not strictly necessary

[hvdijk]

Agreed. There is no blanket ban on cookies without permission. A justification is required, and consent is one of the possible justifications, but not the only one.