If you read the report this is why I say network traffic with a Sec-GPC: 1 (GPC opt-out) should return a 451 automatically instead of a cookie, and how the Meta Pixel code can wrap a GPC conditional around execution. That's why they are terrified - fines don't matter, code does.