Learn at what moment your defenses are down so that they can sell you stuff, presumably. Isn't that the general assumption about tracking?

Or sell your data to interested parties. Maybe if you liked certain GitHub repos, you are more likely to vote Democrat or whatever.

I'm not sure that the GDPR really cares what is being done with that information? It cares more about who that information is being shared with, and about your consent.