> How many of these can be faked with some additional code with Chrome headless? All of them. As soon as you can run some JS code before the page does, every s

> How many of these can be faked with some additional code with Chrome headless? All of them. As soon as you can run some JS code before the page does, every single difference can be monkey-patched. There's no way to distinguish native APIs from fake APIs made by someone that knows all ways of detecting them.