Third-party data controllers are unnecessary, hostile to users, and harmful to publishers — is there a good reason for their existence? Just because there isn’t a proposal yet doesn’t mean there couldn’t be one. The simplest effective approaches often emerge late in the game.