[giancarlostoro]

It might also just be done by whatever underlying web framework they use without them realizing. Like maybe a call to a method that checks if you are authenticated creates those cookies deep in some library they have less control / ownership of. Just taking a guess.

[jefftk]

Possibly! But then they need to choose: take full control of their stack to where they can ensure it doesn't set unnecessary cookies, or use cookie banners.

[giancarlostoro]

I am certain if I am in any way right they could overprice the behavior, but im making a wild guess. Or maybe they missed a page.