They can pull the apps, but Android Q will add several additional security features - e.g. scoped storage (no more SD card access without user consent), EXIF location stripping (accessing EXIF from photos will require additional permissions) and plugging of several possible fingerprinting sidechannels.
This really feels like a cat and mouse game, with Google not actually trying to solve the issue. The proposed additional security "features" will give a false sense of security.
Any way for 2 apps to communicate together will be exploited for the same purpose in the future. Google would have to fix the issue in a more fundamental level, which requires better understanding of users habits and wishes in term of privacy.
But obviously, privacy-oriented users are the worst users for an ad network machine...
