Does anyone know how the IDs can be anonymous? What's stopping anyone from associating the ID (presumably sent as a header?) with an account on my site?
Is it maybe like an OTP based where google and chrome generate a new ID for every request, opaque to the intermediary but google can correlate them later?