Right, that's why the setting is called resist fingerprinting. You still need to take other precautions like not full screening. A while ago I tested resistfingerprinting with a few machines and they all have the same fingerprint, so at least it's better than nothing.

I tested with my browser and it was unique as well. It seems to be caused by high dpi monitor breaking the window size rounding logic. Retrying with high dpi disabled results in

    Within our dataset of several hundred thousand visitors tested in the past 45 days, only one in 5551.36 browsers have the same fingerprint as yours.

    Currently, we estimate that your browser has a fingerprint that conveys 12.44 bits of identifying information.

Maybe having resistfingerprinting is a fingerprinting datapoint itself?