Python doesn't try especially hard to stop you from doing stupid things in general. It's kind of core to the language that it doesn't. Hence no access modifiers. I think it's usually phrased as "we're all consenting adults".
"legitimate interest" was supposed to be for things like remember-login cookies and the like. Not for advertisers going "my interest is legitimate because it's how I make money".