This is kinda true but also kinda fear mongering. UTM parameters are just to track where you clicked the link from. They’re usually not dynamic, and don’t contain anything about you personally. The example in the screenshot utm_source=newsletter is probably added to all links in a company’s newsletter email, so they can tell that people get to the page via the newsletter.