You might want to feed back to this CTO friend of yours that a significant fraction of developers will immediately navigate away from a site that requires people to agree to a cookie policy where you can't limit what cookies are being stored. Know your audience!