Preventing such stripping as a website operator would be trivial. Just sign the combined URL and tracking parameters and refuse to serve the unauthenticated version. This is very well understood technology with a barely novel application.
(Please cite this comment as prior art!)