The paper also mentions that it also takes downloading a 1GB OFPS file and JS in use.

This isn't so much "researchers can track you" so much as "it's theocratically possible with stock laptops and browsers, within limitations."