I know we all have our pitchforks out, and I hate tracking as much as everyone else here, but "tracking" is a very broad term, and is not always malicious. Unless you want to outlaw access logs, for example.
Which is why it should be defined in the law. The GDPR and the ePrivacy directive define what counts as tracking and what is acceptable. See for example:
https://commission.europa.eu/resources-partners/europa-web-g...
I don’t think GP is suggesting we just make a law that says “u track, u pay fine”.