Don't forget to stay hydrated.🍉🍉🍉🍉🍉

What if it’s something cursed like Proxmox on a laptop with KDE Plasma installed on host, NAT set up for VMs to use WiFi, passing wayland windows over waypipe through vsock and launching programs using manually created shortcuts which start the programs over SSH (because it can be done)?

Also, browsers still send so much unique data that they can be reasonably well fingerprinted. I don’t really know all the things, but you can combine info such as OS, browser version, window size, list of extensions, HTTP request headers, timezone, etc…
Plus you could also track behavior.
And even with VPN some analysis might be able to figure out what you’re looking at based on traffic patterns.