There is certainly less need for it now as browsers have many more mitigations in place than when CSRf was first introduced. But I would say yes you still need

There is certainly less need for it now as browsers have many more mitigations in place than when CSRf was first introduced. But I would say yes you still need it for defence in depth. For instance in RFC6749 (OAuth 2.0) it says clients MUST implement CSRF for the redirection step.