Isn't the point that the attacker could compromise that promise of non-tracking? They could track whatever is routed through them and then forward them on to t

Isn't the point that the attacker could compromise that promise of non-tracking? They could track whatever is routed through them and then forward them on to the legitimate destination.