At WordPress.com, we have millions of sites. Having users be logged in so they can ‘like’ a post or comment or write new content is kinda important. That uses APIs and third party cookies (first party, but the API is a third-party from the perspective of the site they’re on). We are constantly dealing with Safari thinking it’s “tracking”. Disclaimer, we do track things, but only on admin pages, not users’ sites.