Third-party cookies, and presumably Privacy Sandbox are both enabled by default. I can't find any controls to disable Privacy Sandbox, and I see the presence of Privacy Sandbox attribution APIs in JS.