I would not be surprised if google, meta and co don't have big ML codes that try to find signals to increase ad revenue, and they dump all data they have into it.
Meaning, of course, people are in charge of the machine learning / algorithm, people manage the weights, they measure the outcomes, they exercise editorial control. It's not a mystical black box given to us by god or a super advanced alien race; it's people doing people things; if they get the profit they also get the liability / responsibility. Even if they're not sure how it works, they sure as hell still responsible for it.
However I'd say sending sensitive (or at least private) data to google analytics is more or less its intended purpose. I don't think the use and continued existence of google analytics is compatible with any reasonable privacy protection.