I see a couple some framing issues your comment. For example, the comment links (A) cookie tracking data with (B) people giving advertising a bad wrap. But, I think that people give advertising a bad rap for many reasons beyond simply cookie tracking. Given that, I worry that the idea "cookie tracking never led to harm" distracts me from the larger issue of generalized corporate and governmental data surveillance, especially considering that it seems like personal data breaches usually deal subtle harm to people.