Comment by firstlink

Preventing such stripping as a website operator would be trivial. Just sign the combined URL and tracking parameters and refuse to serve the unauthenticated version. This is very well understood technology with a barely novel application.

(Please cite this comment as prior art!)