That's true. But it's just a small part of overall tracking. And nobody would care if the cookies were used only for auth or purely functional reasons.