I think you can still be fingerprinted without cookies or Javascript (e.g. with HSTS supercookies). It's obviously not as effective.