From the Blog on legitimate interest

Audits almost always check that consent was collected. But rarely, if ever, do they check if appropriate awareness was created.