I don’t think two separate forms are needed for GDPR consent and ATT. Apps I worked on took the result from ATT and used that as the user consenting to be tracked in the app for GDPR.

I guess companies want to make it cumbersome as possible so user gets fatigued and just clicked through it mindlessly like with cookies banners on every website.