Making a note here for completeness (see also discussion at w3cping/privacy-request#156) to ensure:
(1) the spec explicitly communicates that this capability doesn't add entropy, that it is just a more convenient way of discovering feature support information that can be inferred from the OS and browser version already
(2) To ensure the extension point for privacy controls are in place to prevent the capability from being used in the future for fingerprinting, etc.