Don't be silly, the legislation doesn't state that websites have to show cookie popups. It's rather where the term malicious compliance enters the picture, a compliance incentivized by the financial interests of the biggest advertising businesses the world has ever seen.
^ That, and lazy devs who prefer to add a one-line cookie banner js, than review if they need or even use tracking cookies.