@bortzmeyer reading this now, I think 2.3.4 specifically does *not* claim that operators have such a right. Instead, it notes IAB guidance (RFC8165) that suggests host-based alternatives to network-based metadata insertion.