Hacker News Reader

Device info is spoofable, and tying it to IP means the phone experience is just awful.

For sure, but then the user assume they know what they are doing. It is to prevent cookie hijacking.