Imagining a returning user who previously consented. If non essential cookies changed since their last visit, that user needs to consent again. But in scenario, just auto opt them out? I’m weirdly on the fence between this might be a reasonable block or a violation of GDPR for denying access to users who do not provide consent.