Under GDPR, you must opt-in. So blocking the popup is the same as no consent, if you're in the EU.
I don't trust random sites on the internet to follow the law anyway, so nuking your cookies and localstorage when you close the browser or navigate away is what you should be doing if you're concerned about this sort of thing. Obviously sites I need to stay logged into get on the allowlist.