It changes the economics of the attack because it requires the attacker to do compute before they can make requests. Depending on how good the fingerprinting is

It changes the economics of the attack because it requires the attacker to do compute before they can make requests. Depending on how good the fingerprinting is, it can also get very expensive (eg. requiring you to run a full browser, rather than merely computing a few sha256 hashes)