More generally when it comes to user agents, I feel there is too little guidance and investigation into their behaviour. How and when they could possible mediate consent and its withdrawal is one question. How & when they act as data controllers and need a legal basis is another.