The @media queries for forced-colors, prefers-contrast and prefers-color-scheme are all a fingerprinting risk because sites may modify fonts or other layout-influencing properties, or properties that affect text metrics. These can all be exposed to script outside of computed style or other easily mitigated technique.

The spec sections on Privacy should be explicit about this and discuss trade-offs in user needs vs. fingerprinting risk.

It doesn't seem like we can limit properties while maintaining the usefulness.