True, but apparent "not including the header" gives you strict privacy controls, while "including an invalid header" will set them wide open.

That is a bit strange behaviour on IE's side as well.

Where does P3P allow me to manage this trust relationship you say it's based on?