Cloudflare's Turnstile bot mitigation tool is now requiring WebGL access to verify users, raising significant privacy concerns. Because WebGL exposes detailed graphics hardware information, this new requirement can be exploited to uniquely fingerprint and track individual devices.