I was trying to say that, where an ad company’s legitimate interests are likely at odds with a user using another website.
Legitimate interests to do something sensible (like fraud/ddos protection) is easy to justify.
Legitimate interests for ad tracking is a lot harder to justify, so it’s easier and less risky to just ask for consent.
But yeh, it doesn’t really matter in the grand scheme of things. At the moment, at least.
It’s only the big prolific companies that are going to have difficulty. Or if a particularly knowledgeable person (or lawyer) has a bone to pick with a company.