GDPR Article 7(1) puts the burden on you. If a visitor's consent is ever questioned, you have to demonstrate that it was given. A banner on the screen proves nothing after the fact.
Under GDPR, tracking scripts must not run before a visitor agrees. Adding a cookie banner isn't enough on its own. If Analytics loads while the banner is still on screen, you've already tracked someone who never agreed.
Tools built in the trenches. We develop the extensions we needed for our own projects, now refined for yours.