Can't privacy concious browser defeat FLoC simply by sending random cohort IDs on each request?
While the whole framing of EFF et. al. is put in a way that does not allow for even a small doubt that the proposal is just the worst thing ever with no redeeming qualities. That framing disallows working within this feature to modify browsers to send the required headers.