For clarity: This relates explicitly to UA not GA4. That doesn’t however mean that the current version is deemed GDPR compliant; that is likely something that a future investigation will decide.
Google claims that GA4 should be compliant, but at the same time they have also for years until a few days ago been providing a version of GA that wasn’t.
We migrated to Matomo, which has very similar functionality as GA, but can be self hosted and is GDPR compatible. It can even be configured to run without consent since it doesn’t build a third party ad profile, which should actually improve the data coverage a bit.
The tracking API is a little different than GA so we had to redo some things to get all the events to trigger properly (especially for e-commerce), but for basic usage statistics it’s relatively plug and play in the tag manager.
https://matomo.org/