It should be illegal, but we also need technical prevention of it, because the internet is global and goes through too many jurisdictions to really regulate.

Plus, fingerprinting tech would get developed for criminal organizations or intelligence agencies anyway.

there are some more or less legit causes for fingerprinting. like bot protection or to identifying scammers that just create another account when previous is banned.

whether this is justified is of course subjective