Re: 'Legitimate purposes'
Then they should wait until one refuses tracking/advertising/cookies and then blank the whole site to one. Fair enough --- I generally leave immediately if a site is insistent, with no hard feelings: I acknowledge their right to refuse service. Just as I would leave a pub instantly if a beer mug smashed on the door jamb as I entered.
Their site, and nearly all sites, are not essential to my life. But an absence of advertising is.
And I don't care if this is the end of the Free Web, or the collapse of their business. They should fund it on another model. There are many millions of sites, advertising funded, whose loss would be a blessing. Any business or news site has it's purpose in showing off it's wares, and should be funded from their profits. Any private site can be funded by the owner or well-wishers.
Amusingly, some of the less capable news-sites in the U.S. are still panicked like crazed loons by GDPR, and still show 'We deeply value our European Visitors, but the content can not be shown at the moment' after all these years.
Apart from the pathetic nature of relying on tracking --- to which many Americans also object --- one would think they could find a better solution by now. Unless they think GDPR and other such laws will magically disappear, as in sad old Spectator types' wet dreams, they are stuck with ignoring the entire world outside forever, which would disappoint their more curious cosmopolitan American readership eventually.