This is quite interesting, and might come as a surprise to some non-European marketers:

Consent frameworks can’t just check a box — it’s a wake-up call for anyone still treating compliance as a technicality rather than a structural shift.

Interestingly enough, there's always a lot of trackers - sometimes hundreds on a page - and that aks the consent for "legitimate reasons", in addition to all those who don't claim legitimate reasons.

If they indeed have legitimate reasons, they shouldn't need to ask for consent!

The EU ought to enforce DNT and some new X-Cookie-Consent: Essential-Only header.