W3C give up on preventing PWAs from tracking users

A PWA has lots and lots of issues regarding trackability. start_url is just a very minor part of that. An application that is actually a weird website will be able to track you, there will be Javascript with tons and tons of attack surface for this.

If you don't want tracking, use proper local applications and deny them network access.

This smells like a story Apple shopped out to keep defending their 30 percent racketeering operation. PWAs are better than native apps for privacy and security in almost every single way.

There are so many more ways to track you, not sure why the fuss about PWAs which almost noone is using.

For example you can just use WebGL for fingerprinting the browser.

Once again proving W3C is absolutely useless.

A great opportunity for Firefox to implement PWAs with privacy protection and use it as main selling point.

Why can't they refetch the manifest.json when cookies are cleared? That would give it a new ID.