randomizing browser figerprint good practice?

Don’t panic. Tor can also be exploited by the NSA (for example) over the network, no matter how much you try to randomize the digital fingerprints. If you’re really concerned about privacy, you can use the Firefox settings I shared, which disable both WebGL; you can also use a VPN service—I recommend Mullvad—and connect to servers managed by Mullvad using multi-hop (not rented servers). Now, if we go down to the operating system level, it’s much more complex. I can help you with Android, but not with Windows, Mac, or Linux—not because I don’t have a personal computer, but because I’d have to write a powerful executable script to harden the system, like Windows, for example. Things are changing one way or another; don’t worry. If you have any questions, let me know. Remember: Maximum privacy and anonymity are not guaranteed.