@webology I think a major problem here is that the same API also works in Incognito mode. This would allow Google to fingerprint you even if signed out of your account and track you across incognito sessions.

And that's not to mention the fact that the API works even if you're signed out of a Google account so fingerprinting can be performed even without an account.