A machine learning model is used to classify which top privately-controlled domains have the ability to track the user cross-site, based on the collected statis

A machine learning model is used to classify which top privately-controlled domains have the ability to track the user cross-site, based on the collected statistics. Out of the various statistics collected, three vectors turned out to have strong signal for classification based on current tracking practices: subresource under number of unique domains, sub frame under number of unique domains, and number of unique domains redirected to. What's preventing ad networks (or whoever this is meant to protect against) from gaming this system?