I don’t agree with this conclusion and don’t get why anyone would, tbh. First, tracking methods these days are more advanced than leveraging basic http headers - on the contrary, spoofing http headers contradicting all other fingerprinting results might get you even more flagged. Also, if you use tor, https only should be in enforce mode as your default - http header spoofing doesn’t do much in this case anyway. I don’t know why Sam Bent (?) makes such a thing out of it to be honest
(edit: fixed typo)