"Chrome users are currently completely susceptible to having private cookie data stolen on thousands of high-traffic sites"

Not true, sure it's a workaround solution but with frogeye's block list [0] and uBO you're pretty much covered on Chrome regarding CNAME-tracking

[0]:Geoffrey Frogeye's block list of first-party trackers https://hostfiles.frogeye.fr/