As long as browsers are inherently insecure in regards to fingerprinting protection, the only viable protection is to create an extensive list of known JS finge

As long as browsers are inherently insecure in regards to fingerprinting protection, the only viable protection is to create an extensive list of known JS fingerprinters. Additionally one needs to disallow all third party javascript sources by default. Both strategies are possible with a good content blocker. These strategies protect against all known and almost all unknown fingerprinting scripts. The only scenario where it doesn't work is unknown first-party scripts, but cross-site tracking is impossible.