@Edent Privacy is not an individual matter. It's an aggregate one.
Individually, what is exposed without their consent is that they found the link on Mastodon (and what instance they use). This could allow the site to use their identity on the site to try to link them back to an account by the same name, etc.
Collectively, what we lose is the outcome of whatever market knowledge the publisher gains by analyzing user behavior.