Their solution to "Layout-Based Attacks" is trivial to get around, any visual style change can be detected, even if it doesn't trigger reflow -- the <canvas> API has pixel accessors.