this is a great point. it would be awesome if indeed sites had to gain my permission before showing me an advertisement - or at least a custom one. someone should sue!
Wouldn't mind seeing this happen... Also, showing ads or sending/setting tracking data before clicking on the "Accept" button.
Or at least showing an ad that they don't host themselves. A first-party hosted ad wouldn't give away any user data.