The idea is that it'd be illegal to do so. Same as how with GDPR it's illegal to track users who denied tracking, even though technically nothing stops you from doing it.