There's nothing wrong with web-vitals, and it's included in create-react-app, which the author used.
I agree, though for the sake of argument Facebooks tolerance for tracking and fingerprinting far exceeds anyone else’s on the internet so their stamp of approval for web vitals is meaningless.