We have to distinguish technical measures from legal measures. Withholding the IDFA is good, but if they did only that then people could use other things like fingerprinting or UID2. The App Store terms however prevent at least some of that. That's enforceable by Apple.
♥ 4