Maybe someone more knowledgable can provide some insight here? The problem seems to revolve around transmission of PII: "Based on this data, Google was able to

Maybe someone more knowledgable can provide some insight here? The problem seems to revolve around transmission of PII: "Based on this data, Google was able to deduce who he or she was." Presumably the PII didn't come from the data transmitted to GA by the site, more that GA was able to cross-reference the client ID from the cookie and determine the identity of the user. So if one was to disable GA cookies and/or override the client ID being sent from one's own site, would that be a workaround?