I thought Google Analytics could be GDPR compliant by simply not loading it until the user has consented? (i.e. the cookie popup hellscape we now live in)