I wonder how often we'll repeat the error of treating user privacy as something the user cares deeply about (against all this observable evidence to the contrary) before we accept that the well-demonstrated-and-documented default is users do not care (and if we want the behavior of websites to change, step 1 is educating users as to why they should care and what the risk models are).
I mean, for the average person, it's pretty rational not to care. The only result they see from tracking is seeing more relevant ads. 99.99% of people for the foreseeable future will not have a bad experience from commercial tracking (that they wouldn't have from non-tracked ads anyway).
