The opt-in/opt-out distinction is less about user experience than about which jurisdiction's rules apply to which data flow. Getting it right at scale means treating consent as infrastructure that adapts to context — not as a single banner setting.