This gets repeated a lot, but is not my experience after having worked with both in-house and contracted lawyers to understand how functional cookies are handled. We end up wanting something more durable than session cookies to track user preferences so we can set them next time they visit. This is super standard light/dark mode, region, language type of stuff. But that's considered “tracking" in many of these discussions, which never made sense to me.