The workaround would be pretty simple to implement. Cookies are only needed when you need 'state' between the client and server, so only serve cookies when you need state. The very first instance of state should be the very first instance of a cookie warning. Of course, once you have implemented cookie based tracking, this doesn't work anymore.