Turn weren’t stupid. They were forced, given the situation. I offered many many ways to certify the cookies/identifiers were mine (as written in the text). The law is not entirely clear, but they should not put unreasonable hurdles in the way of the requester. In the end, they settled for a simple affidavit, i.e. a useless piece of paper.