This can be done without tracking users though. Also, in the context of "no-one owes you a business model", just because being able to do something can increase your bottom line by some % doesn't mean you can do it at the expense of individuals. The web industry (which I'm very much a part of) had years during which they could have voluntarily stopped being shitty to users, and they didn't, so now we have GDPR etc.