> It asked for zero permissions.

Not quite. It requested to play DRM protected content.

And asked to create a WebGL context and to view canvas data.

Closed and reopened the browser and revisited the site a couple times, and it thought it was my first and gave me a different fingerprint each time.

removed it! The latter should not be happening anymore either hopefully

update: removed it, didn't need it and I use chrome so it didn't pop up haha