"legitimate interest" was supposed to be for things like remember-login cookies and the like. Not for advertisers going "my interest is legitimate because it's how I make money".