Why Bluesky needs a permission for HTML5 canvas image data?

It's basically fingerprinting.