Even if this <i>is</i> a real threat vector, I imagine that in the time it would take to make this illegal and try and prosecute even one person, it will have been dealt with naturally by device manufacturers. Already this would be easy to defend against with any devices with properly granular permissioning. Meanwhile, anyone this far out on the bleeding edge of trying to track you will have a dozen other fingerprinting mechanisms rolled out by then and will have no problem dropping this ludicrous attack.<p>Legislation is <i>rarely</i> the right tool.