Good catch! You're right - a London user with maximized Firefox would hit 2/3 indicators.

Fixed: now requires hasSpoofedApis (most Tor-specific, since normal browsers have plugins) plus at least one other indicator.

Pushed: https://github.com/Routstr/routstr-chat/pull/172