(would be an edit of above but I know some clients don't behave well on certain nostr features so they make me use comments, sorry!)
The privacy/resistance score used by CreepJS is a great example of measuring metrics against someone's attempts of trying to resist/circumvent being fingerprinted. A service could just close someone out of they think a user is 'suspicious' enough
