I'm not really knowledgeable enough to say for sure, but this sounds like a privacy nightmare. It's hard enough to keep browsers in general from giving up enough info to identify you even without cookies, but I can't even begin to see how to stop this from leaking just about everything.

Direct HW access for browsers? Not a fan. What we need is a layer between the browser and the HW that anonymizes and generalizes the API responses instead. I get the increased latency would be directly opposed to what this is trying to achieve, but it's a prize I'm willing to pay. It's contrary to what every tech giant wants, which is an indication it's actually a good idea. They aren't our friends.