If you don't allow third-party scripts to store any information on the client, you break everyone's Google Analytics scripts. Then everyone will have to give out subdomains to analytics companies, ad networks, etc and we'll be right back where we started.