As long as they don't register users, accept payments, etc - just serve content - I'm okay with this interpretation.
And if they, keep records of unregistered users, track their behavior, and sell that data or use it to make business decisions?
As long as they do it on their site, not third-party ones or via third-party ones, then also ok.
I'm not sure GDPR applies if they're not using any third party services. That's the thing with GDPR compliance, if you're already doing things right it doesn't really change anything, you don't even need to ask about cookies (because cookies are actually ok under GDPR if they're used the way they were originally intended.)
Sounds good to me; I'd like to take advantage of something like that one of these days.