> For instance, a publisher can track what people do on their own site—just not on other sites. So they can sell targeted ads based on the information they have.

This is what I believe is fair. Unfortunately we are seeing the difference between first-party cookies and third-party cookies gradually vanish. Publishers are already encouraged by ad tech companies to set up CNAME records so that a subdomain on a publisher site points to an ad-tech company domain.