This is interesting, but even without relying on JS, most users are already fingerprintable by the combination of IP + user agent.