Push notifications are the most likely abuse vector but are gated behind a separate permission. I think they locked down installed apps, and fingerprinting isn't really relevant if they can just set a cookie. Acceleration is also available on the web. Not sure about battery, but most apps (aside from Uber that increases the price if they think you're desperate) can't really do anything bad with that. So I don't see much left tbh.