It is not trivial for publishers who have years of adding advertising and analytics tools to their website to come up with a strategy for peeling these back or checking compliance. If I had a blog, it would be easy for me to check and decide what to remove or modify. But being part of an organization means that most of the shit on a publisher’s network is a manager’s baby project and is going to require meetings, ego stroking, and if you suggest a change then revenue drops, you will be prime suspect. Not to mention months of managers saying — “well we used to have this really great analytics platform that helped me steer this company but now I can’t do my job because so and so deactivated X”. For many of the tools you might have a contract with a company to provide service. They have people specifically hired to be persuasive calling your leadership to try to keep the relationship going, so they will fight to keep you as a customer. I think the interesting thing is that you can’t pass the buck, you are ultimately responsible for providing compliance, not just choosing tools that claim compliance.