the font listing thing i would have never thought about!

Font enumeration is one of the Sneakier ones — the browser has to report installed fonts so text renders correctly, so it doesn't feel like "data" the same way an IP does.