If websites are able to track their users’ typing behavior and mouse movements, then the websites may be able to use that data to fingerprint, track, and possibly identify their users. Is this a real privacy risk? If so, what are the methods to counter keyboard and mouse fingerprinting by websites? Note that I do not want to disable JavaScript.
I have a “JavaScript off by default” approach and things generally work fine for me. I enable system functions on an as-needed basis; most sites don’t need to know what my mouse and keyboard are doing, so I don’t let them. In the rare case where it’s needed, I have it turned on for that particular location.
It takes a few weeks of frustration to set up, but I did this over a decade ago, and I’m down to maybe a site every 3 months or so where I need to tweak something. Usually when something doesn’t work right, I investigate and realize that I shouldn’t be visiting the site in question at all, and should find an alternative source.