The point is that if it can be self-hosted, then there's no reason to not use cookies and JS, because that's what allows for collecting actually actionable metrics.

And if it's a 3rd party service, then it's not option for anyone who genuinely cares about visitors' privacy.