Beyond browsers, fingerprinting covers device sensors, TLS and network stack behavior, installed-app signals, and typing or motion patterns. Anything measurable and stable can serve as an identifier.
The defensive principle is uniformity rather than randomness: looking like many devices beats looking unusual. Randomized values that change per session can themselves become a distinctive signal if nothing else behaves that way.