In a typical cookie-based setup, Analytics stores it in a first-party cookie. Cookie deletion or a different browser or device can create a different ID, splitting one person into multiple measured users.
For exported web data, inspect BigQuery’s user_pseudo_id field rather than assuming a top-level client_id column. Consider correctly implemented User-ID for cross-device analysis; Google signals is not part of the current reporting identity.