Yeap, but the thing is:

- they don't care about the cookies they are setting on their properties, if most of the functionality they have require you to be authenticated anyway.

- These "smaller websites" are exactly the ones more likely than not to be Google's and Facebook's largest source of data, because these sites are the ones using Google Analytics/Meta Pixel/etc.