Going batshit with browser APIs is also a formidable GDPR defense.
e.g. try browsing the privacy-related forms for Google (
https://myaccount.google.com) on Firefox :D
(entire browser freezes up every other second for me, because of some extremely important work Google needs to run on my CPU to let me scroll down on a static site containing roughly 30 words)