Still unresolved are history leaks via Referer, from things like fonts, ajax, tagmanager google.com API calls, present on all websites.
Why web people link so much Google stuff in their websites is a mystery.
You're also now just sitting behind whatever ISP your VPN uses which knows everything you're doing and sells it back to who-ever.
If your not rotating your VPN services that still allows you to be tracked via that IP. At the end of the day all your data still belongs to someone and can be used for whatever. Until DNS over TLS is complete and rolled out across the board your metadata can still be used.
Not to mention all of the other things associated with this. Even being connected to a VPN via your phone will still leak information like your coarse location, wifi networks and bluetooth beacons nearby which all get sent to your primary phone carrier and whatever applications you use.
- ISP has your name and history. The AdTech knows your IP's history, and most likely your Id.
VPN:
- VPN has your history, but no name (paid via voucher), and is other country's legal entity. My ISP only knows I'm using some VPN service (DoT enabled on my router). The AdTech is missing key identifier, IP, to link your data together (to aggregate).
> ISP your VPN uses which knows everything
Both ISPs know squat, just encrypted traffic from my real IP
Leaving aside the giant DNS question, there's SNI to consider as well as the VPN provider knowing your source IP and times of access. Then, because you're on hn, consider what the graph of little-used services you (probably) use says about you. Work VPN/chat/webmail servers? Admin interfaces for side projects you work on? And of course good old fashioned typos in your shell.