This is the size I am currently using in one of my prototypes. As noted by another poster, this demonstrates the lightweight client storage requirement. All I need is sufficient entropy to uniquely and securely identify each client from the server's perspective.

Probably just to emphasise the lightweight requirement on client side storage.