Say you use a VPN to connect to tor browser on an Android Phone. (So ISP sees onky regular https traffic)
You are private yes?
So people get identified by fingerprinting - maybe my device is a Google one with a specific resolution and js enabled (narrowing it down to X number of users)
How is that actually used to identify you?
Would the site you visit have to be a honeypot, or the exist node have to be one tracking people.
But to have fingerprinting used against you - how can that lead to a specific person - or would it be a court case that says āa device matching X,Y,Z visited this site at this time - and you have that deviceā type scenario?