I do think FLoC is a threat, but I think it should be up to the site owner to choose (maybe put a opt-out checkbox in Settings > Privacy?) and it shouldn’t be rolled out as a security release.