The only caveat i'll add is Apple is providing ad software that doesn't trigger the double verification. This can be seen either as a push to force people to respect privacy(as their software does), or a push to control a larger share of the ad market (as the foxes here i'm sure believe)
It does not pass the smell test though: Apple has nothing to gain from its non-existent advertising arm, whilst advertisers have a lot to lose if random users can opt out. I have no doubt Apple's solution needs improving and will be circumvented, but I am not going to lament that better is not perfect.
