Hacking around Safari's 7-day Cookie Limit

It does seem like this is correct ... a server can store any cookie in a first-party context, and Safari doesn't mess with that (as far as I know, anyway). So, if it matches the name of the client-side cookie, then it can persist that cookie.

However, I do recall seeing that ITP got stronger recently, whereby Safari might actually erase server-set, secure, first-party cookies after 7 days, on any site that uses some sort of third-party CNAME cloaking domain that is on their shitlist. Is that true? How far does ITP reach these days to delete information, in these cases?

(2022)