> you don't need a banner even of you do track users for anybody with DNT

This is not true. The specific text of the law requires that websites have to provide details about their cookies, and then document and store user preferences.

If you just honored the DNT, you would still be out of compliance.