Agreed - I also question if analytics, targeting and personalisation is "necessary"?

In my mind, only cookies for things like Auth and session handle are necessary.

But I am not a lawyer or expert.