Do you really expect the OS to block apps from accessing screen size, locale, fonts, time zone, GPU metrics, accessibility settings, etc. when they actually need these APIs for legitimate purposes? Location and microphone permissions are red herrings when it comes to fingerprinting.

You're also neglecting the fact that malicious apps can mislead the user by prompting for permissions for a seemingly legitimate purpose and then abuse those permissions once granted.