You can bypass such a fingerprint by replacing JS using that very same extension.
Keeping a database of browser fingerprints does no good when performing those fingerprints relies on JS running unmodified. You can just patch the algorithm to always return a known good fingerprint, or one from a set.
A legal response would be the only possibility, but due to the technical means still being possible... well, on the internet legality doesn't really get in the way of technical possibility, now does it?