You really, truly, cannot close all the holes necessary to prevent fingerprinting while still providing a useful general purpose OS.

You especially cannot achieve this while providing third parties access to what has traditionally been vendor-only API on mobile devices; e.g. to support third-party app stores.

This simply is not solvable through technical means. It must be solved through policy and law.