How would third party JavaScript fingerprint users? Only if there’s a backend data broker aggregating identities based on a universal token (e.g. email). Or one

How would third party JavaScript fingerprint users? Only if there’s a backend data broker aggregating identities based on a universal token (e.g. email). Or one of those super shady tech wizardry techniques like timing OpenGL calls.