Mobile fingerprinting is less about one exotic API and more about consistency.
Touch changes the evidence
Viewport behavior, touch support, motion availability, and embedded browser quirks should line up with the claimed device.
App shells complicate labels
In-app browsers and webviews create legitimate variation. Controls need to account for those paths before treating mismatch as abuse.
Server evidence still counts
Mobile claims should be compared against network posture, timing, locale, and session history.