Yeah but if it's opt-in for privacy concerned users there may well be two users in the world with identical basic metadata (browser version, platform, etc) who have this enabled. And telling you it was one of two users but not which is pretty shite anonymization.

Regardless it's still adding an extra bit of information leaked, so you may as well forge a common value rather than make something new up.