Secondly, and more importantly, you make it seem like the user is merely an innocent victim, however the user is choosing to use a browser which accepts and explicitly sends cookies with every request. If they don't like that they are free to turn off cookies in their browser, or use a browser which doesn't accept cookies.
edit: fixing typo