You're right in theory. In practice - especially due to adsense, they HAVE TO track users at least to distinguish fraudulent clicks. At least, fraud was the initial reason for tracking.