They could change the viewport size that gets reported without changing the actual window size. It would take some effort to do it the best way, but seems worth it. It’s among many improvements to anti-fingerprinting that could be made, but it seems like some time ago they gave up on the idea of making it effective, convenient, and on by default.