How about anything that tracks the user's behavior and changes its output based on that behavior specific to that user. If I have a table somewhere in my software that identifies a user and references behavior, not intentional settings, just behavior and that is used to determine what the software does. Make that illegal and a lot of problems go away. To me it is this feedback loop that is insidious.