

This is actually not only being reported by noyb (which also isn’t an outlet, but an NGO specializing in data protection matters) but also by netzpolitik.org and even heise.de (both German).
All three have been very reliable in the past, so I don‘t think there‘s any reason for doubting the authenticity of the documents.



Note that this is an issue from 2021. Firefox has implemented countermeasures since version 85, Chrome seems to have done the same.
So while this is definitely interesting, it shouldn‘t be an issue anymore.