Shouldn't TB set the `full-screen-api.enabled` pref to `false` so websites can't fingerprint the screen size? (Firefox's "exit/allow fullscreen" dialog appears _after_ the window has become full screen.)