Bad optics aside, it doesn't actually reflect reality. See my other comment. You can enable basically all the privacy settings and still pass turnstile. Tor browser in a VM passes it, of all things.
reply
Any idea what the difference is between your setup and the one in the article that failed with fingerprint-resistance enabled?
replyHe's using a custom browser, apparently: https://hacktivis.me/projects/badwolf
replyI'm talking about the screenshot from Firefox.
replyIt didn't fail for him in firefox, even with privacy settings enabled.
replyIt tripped "Canvas Randomization Detected". See the last screenshot.
replyCloudflare's demo page still treats that as a pass, but complains about it. As is often the case with Cloudflare, I expect that they'll then take no responsibility for sites that use more aggressive settings.