Since the cohorts are so small (a few thousand), it's extremely likely that the FLOC id and the ip address is all you need to track someone, even behind NAT.