And such beacons are then expected to be anonymous because no cookies data could be send along. If any tracking oriented company wanted to overcome this for ne

And such beacons are then expected to be anonymous because no cookies data could be send along. If any tracking oriented company wanted to overcome this for nefarious reasons they wouldn't be able to do that without explicit help from the visited website who would then become legally liable. (For example by including in the beacon call a hash of personal identifier like IP or e-mail disrespecting RGPD and such). Is that a good enough layman understanding of the stakes here?