That rubric only applies when the users aren’t actively and maliciously sabotaging the system, which privacy-subverting websites absolutely are. (And everyone else is cargo-cutting their behavior.)
Defending yourself from abuse is not an excuse for others to engage in abuse. I have no issue with passive 90's-style ads. I don't need to block them. I use my abuse-blocker to handle more concerning problems.
Note that the most annoying consent banners come from advertising conglomerates (IAB comes to mind). Well who would think they wouldn’t sabotage anything?