This is being done in EU anyway. IIRC I've seen several third party vendorssay that this type of tracking is legal under GDPR to justify 'anti fraud activities' like tracking users and sharing access to their data with other paying customers.

I personally have EasyPrivacy enabled on uBlock (because these tracking scripts using canvas, webgl, etc spin up my GPU and absolutely shit all over my battery life) but they are getting more and more aggressive with first-party CNAMEs, shipping a list of dozens or hundreds of hostnames to try progressively if any are blocked (and probably honestly risk score you higher for "trying to evade them" even though it's a default uBlock list).

I think it's honestly rather stupid, and I am not a fan of hearing my fans spin up for no reason accessing an otherwise plain website while it tries to open media players, try video elements, draw to canvas, download several megabytes of obfuscated garbage to evaluate.

I've worked in anti-fraud software and it isn't necessary. Fingerprinting is extremely convenient and sales loves it, but I would hope that necessity could be broken down by reasoned arguments in the EU - I'm outside of the EU and not familiar enough with GDPR but there are a number of clear and accessible counters to that point - especially if payment is involved. If payment comes into play then fingerprinting becomes irrelevant as anyone making a payment can be trusted up to the level of that payment and that payment method tied to their actions.