I have mixed feelings about opt in. A single accidental click on a web site and GDPR has failed to protect the user. Dark patterns allow that to be gamed. And it complicates legitimate uses.

I'd like auditable data. I should have an easy way to discover everyone with my data (including things like IP logs), see how it's used (at the level of source), and have it destroyed.