But is that the case in practice? It's my experience that there are countless media outlets showing me popups that have the tracking options activated by default.
Most companies hide behind the claim that if users block IP tracking, since they "can't" get geo without IP, it's opt-out. Oath in particular will use any excuse to opt-in by default, but so will most news sites. Regulators seem OK with that.