Allowing AD tracking in the first place is on Apple. They opened the door for bad actors like Facebook. I won't praise them for fixing this hole; I'm upset they put it in and even more upset it's taken this long to consider removing it.