I agree with your general comment, and would add fingerprinting to the list. Many ad networks now fingerprint users to generate an identity for tracking when cookies are not available, which didn't used to be worth it before the phase out. And of course clearing your cookies doesn't clear your fingerprint.

> Google has even gone as far as adding a setting to their AdWords tracking tag that automatically scrapes the HTML of a page in search of anything that resembles a user’s email address or phone number to make it easier to collect first party data automatically.

Really? Link?