People serious about privacy will be using a proxy with flash/javascript disabled and headers scrubbed.