I've worked in anti-fraud software and it isn't necessary. Fingerprinting is extremely convenient and sales loves it, but I would hope that necessity could be broken down by reasoned arguments in the EU - I'm outside of the EU and not familiar enough with GDPR but there are a number of clear and accessible counters to that point - especially if payment is involved. If payment comes into play then fingerprinting becomes irrelevant as anyone making a payment can be trusted up to the level of that payment and that payment method tied to their actions.