You absolute can fingerprint someone without JavaScript enabled. This article explains what signals a website can use when JS is disabled, and those signals include probing what CSS features your browsers supports.

https://fingerprint.com/blog/disabling-javascript-wont-stop-fingerprinting/

Unfortunately it looks like the demo link in their article doesn’t exist anymore. It definitely used to, because I remember testing it few years ago. But the write up is still good.

Looks like the demo is open source: https://github.com/fingerprintjs/blog-nojs-fingerprint-demo