It doesn’t need a cookie popup because they aren’t using cookies for non-essential reasons, similar to how it complies with GDPR because they aren’t collecting any data beyond what is necessary for the service’s stated purpose.