Even if that's true, adversaries can see what ads you're being served, and that in itself could be sensitive data. And then there's data from cookies and other tracking tools.