@cuchaz you're likely to consider is in the middle of implementing Enhanced Conversions. They are doing it the right way by hashing your email address before sharing it with Google, but they will eventually be sharing email, phone number, name and address (is the plan).

I helped them get their cookie consent in order ~6 months ago. Prior to that they were collecting a lot of data that they should not have been.