None of those use cases are broadly thought of as legitimate interest and explicitly require some sort of consent in Europe.

Session cookies and profiles on logged in users is where I see most companies stretching for legitimate interest. But cross service data sharing and persistent advertising cookies without consent are clearly no bueno.