But service operator can just reject requests made with this ID (i.e. block all users who have enabled it in the browser).
That's just plain silliness. A service and its potential users can eternally play this game of technological whack-a-mole but to what end? Eventually there would be no users of the service.Now you can create a Firefox add-on that randomizes the fingerprint instead of making them all the same. Or even better, create plausible counterfit fingerprints.
What's next?