The main limitations on companies are legal, not technical, imposing costs on them that make it not worth to break the law. There are obvious ways of proving w

The main limitations on companies are legal, not technical, imposing costs on them that make it not worth to break the law. There are obvious ways of proving whether any cookie or non-cookie mechanism is employed for a purpose you did not give permission for, namely, audits of their systems and testimonies of their employees, which has resulted in quite a few huge fines being assessed and the illegal activity stopped, and will result in more. We simply have to not legitimize this being done as "business as normal" and have to make it clear that they are not permitted to do so - all the really big impact comes from the large megacorps who eventually have to stay above the board legally.