You don't get to put that genie back in the bottle. If you normalize tracking, by giving it even tacit approval, then any "tacked on" privacy laws or regulation

You don't get to put that genie back in the bottle. If you normalize tracking, by giving it even tacit approval, then any "tacked on" privacy laws or regulations simply become a cost of doing business. The GDPR has serious teeth - by there are still a large number of companies that flaunt the regulations. Like OATH. Anything the user says to try and opt-out will be used as nothing more than an identifier to continue to track them. We've already seen all this play out in the websphere. We do not want this to happen the same way in the real world.