i gotta say if your entire schitck is "we're the open web! we're not like that giant advertising company" then you should kinda expect a backlash from "we shipped an opt-out surveillance device without effectively telling anyone"
no matter how well engineered said device is—and no amount of "well, this is just how the web works, be realistic" is gonna undo that breach of trust