Risk there is that what ever id is generated tends to leak. So lot of cheaters will either tamper with it or circumvent it. So the game will continue and not actually be effective for very long.
Idea really is that you can identify single device time after time. So even if there is slight change in anything like software that can be easily changed that is not good enough.
Not that fingerprints should lead straight to bans, but maybe at least heightened awareness.