Is there evidence that they use that information for anything other than browser fingerprinting or fraud detection?

That seems like the most obvious use case? Or maybe I missed something in the write up.