I understand that the meaning is apparently well defined, but there is room for interpretation. I’m not aware of anyone ever challenging legitimate use reasoning, so I’m not sure how that plays out in the end.

Actually, you’re absolutely correct IMO. In GDPR cookie law “legitimate interest” may refer to your interest in keeping your company afloat, aka make money.

Legit interest = We want to make money