That case is not about accessing first party resources. It was about a German website which (effectively) shared data with a third party provider from a country

That case is not about accessing first party resources. It was about a German website which (effectively) shared data with a third party provider from a country with no adequate privacy protection.