TIL: trackers/spyware can bypass even third-party blocking and same-origin-policy by using CNAME cloaking. There's almost no hope of having privacy on the web, other than to resort to other protocols like Gemini.

Characterizing CNAME cloaking-based tracking
https://blog.apnic.net/2020/08/04/characterizing-cname-cloaking-based-tracking/