I think most browsers have patched this out? i didnt do super concrete tests, but at least on my machine their demo is failing to fingerprint me across private browsing/incognito sessions as they claim. Tested in firefox and edge.

Some users disable favicons; I am one of them (although that is main because I do not use them, rather than due to that).