Cloudflare's Turnstile CAPTCHA leaks fingerprinting data via WebGL

Security researcher HypnoticOcelot found that Cloudflare's Turnstile alternative to reCAPTCHA exposes WebGL information that can be used for device fingerprinting—potentially undermining the privacy benefits that made it attractive to indie builders in the first place. The issue raises questions about whether Turnstile's privacy-first positioning holds up to scrutiny.