Principle of least privilege is for things the client can control, like sending the cookies in the first place. There has already been a "do not track" option

Principle of least privilege is for things the client can control, like sending the cookies in the first place. There has already been a "do not track" option since 2010. It got basically deprecated because nobody respected it. And even if they tried to enforce it, and I actually cared about being tracked, I wouldn't trust it.