AFAIK, it's on them. They can't track you without explicit consent, and they can't force you to consent to improper tracking in order to use the service. By improper I mean something that's not literally required for the service to function; a newsletter obviously needs to know email addresses to work since that's the core operation of the service.