There are so many ways to coerce a GUID out of a browser: single pixel images, cache headers[1], etc. It's not feasible to implement disclosure control[2] retroactively in web standards.

1. http://sourcefrog.net/projects/meantime/ 2. http://groups.csail.mit.edu/mac/classes/6.805/articles/priva...