The point of GDPR is to bring the responsibility back into the provider’s side. Instead of blaming the user for not having technical means and personal rules t

The point of GDPR is to bring the responsibility back into the provider’s side. Instead of blaming the user for not having technical means and personal rules to apply privacy best practices, the site creator has to offer options to review the situation _before_ letting loose all the trackers and third party carnival. And it makes sense to me. If tomorrow a site decide to get their favicon from microsoft‘s new marketing service, it would be unreasonable to expect the users to know to block that.