This opt-in requirement is critical, and the precise thing tech orgs successfully lobbied to remove from the CCPA:
"As a first step, governments must enact laws to ensure companies including Google and Facebook are prevented from making access to their service conditional on individuals “consenting” to the collection, processing or sharing of their personal data for marketing or advertising."
https://www.amnesty.org/en/latest/news/2019/11/google-facebook-surveillance-privacy/
@kyle Soooooo true! GDPR was kind of trying that but it's a "bit" watered down... or enforcement is lacking...