The main difference is Threads is a new product. Unlike Instagram which was released before GDPR was a thing. Sadly, it's way simpler for business to juat avoid the stringent regulated market at launch if you don't want to comply with regulations, then to actually comply.

I don't think the severity of tracking is important when comparing insta vs threads, just the inertia of an old vs new product.