More collection does not automatically create better detection. Broad fingerprinting increases privacy risk, implementation fragility, and the number of signals a team cannot meaningfully explain.
A smaller probe can focus on session start, page views, interaction timing, and visibility changes. URLs can be reduced to origin and path, direct identifiers rejected, and short-lived network evidence separated from canonical analytics.
The architectural advantage is clarity. Every retained field has a stated purpose, retention window, and downstream consumer. Signals can be removed without destabilizing an opaque device identity model.
Good measurement earns trust by constraining itself. The strongest system is not the one that remembers the most; it is the one that can justify every decision it makes.