Analytics can be done in a privacy-friendly way, but the vast majority of them aren't, and as a user there's no way to know whether that's the case, so the default "safe" option is to reject.
Also, it's not the GDPR that's to blame for the popups, it's the non-enforcement of it. GDPR explicitly outlaws annoying consent flows - here's the guidelines one of the regulators suggests, which 90% of implementations out there don't comply with: https://ico.org.uk/for-organisations/guide-to-data-protectio....