This is why you must block all ads always. No exceptions.

I've argued for a long time that adblocking isn't just a quality of life thing, it's an essential security control for browsing the Internet in the same way that patching your system and running malware protection is. I didn't expect it to be protecting your physical security quite so soon..

This sort of thing should also help put the "adblocking is unethical" argument to bed.

Do one better, block ads and give them false data on your profile using a solution like Ad Nauseam.

It's not about blocking ads, but blocking tracking. If you connect to internet you are being tracked even though you block known tracking URLs.

e.g. Hacker news uses no tracking url but uses Cloudflare which tracks the user across sites for things like bot detection.

Not sure that blocks device ID tracking through timing metrics for example. You can turn off java but then you become a beacon of suspicious activity.