Isn't this kind of redirection to set a cookie something explicitly blocked by Safari's Block Cross-Site Tracking feature? And I believe Firefox introduced a similar feature as well (not sure about Chrome). I feel like this kind of redirect thing was explicitly called out in the blog post announcing the very first version of this feature.