On or off by default, the header is useless. Including a tracking blocker without any "acceptable tracking" list would be sane. It would have been even more sane if iframes and third-party resources were never allowed by browsers, but that ship has sailed.