They stopped with the cookies. Weeks ago.
And really, the only reasonable solution is to (try to) educate people so that they understand how gregarious a web page can be and suggest techniques for controlling them.
(You say 'script blocker', but RequestPolicy can prevent the http connections, and cookie blockers/managers reduce exposure. I expect the long term solution is to revert to only sharing cookies that the user has explicitly whitelisted for a given domain or whatever)