Whose “consensus” ? Google or ad techs. That is not acceptable. The right way is GDPR pop up listing the companies you will share user data. With. If the user approves I am sure no court can touch you.
In fact I would argue that most devs don’t assume that this is a problem at first glance. The general awareness and education should be better here.