This goes to show that the assertion that cookie banners are just "malicious compliance" isn't quite correct. These are significant trade-offs here.

you don’t need to track users by giving them an ID they send with every request.

in fact. you probably don’t need to track users.