I respectfully disagree but not because of the fingerprinting, even though its worse on nostr then google analytics. but because when apps push users to sign NIP-42 indiscriminately they are effectively pushing the user to give full control of their nsec over to the app, presuming the user clicks "approve all".
The best thing the user can do with these apps is select "approve all relay auth" but nothing else. but then we are left here where the client the dox the user to any relay they happen to connect to.