Orion already does the important step of spoofing the user agent on IOS to look like Safari (which Brave and other browsers don’t do, hurting them), the next step to truly match Safari’s solid fingerprinting protection is to port over Webkit 26’s fingerprinting protection (which is now enabled by default on safari for all iPhones and not just in private tabs or by switching a toggle in settings, see https://www.apple.com/newsroom/2025/06/apple-elevates-the-iphone-experience-with-ios-26/ and look for “fingerprinting”).
This would, by default and in the background, inject noise into the Canvas, WebAudio and WebGL APIs, with unique noise values for each tab or session. Also, hardware concurrency would be randomized whenever accessed by JS and document.referrer would be hidden from fingerprinting scripts. All this information is documented at https://webkit.org/blog/15697/private-browsing-2-0/ and https://webkit.org/blog/16993/news-from-wwdc25-web-technology-coming-this-fall-in-safari-26-beta/#privacy respectively.
This would set Orion up to be the best browser on IOS for privacy conscious users, as no one else applies that right now (Brave is experimenting with enabling it with a #ios-webkit-advanced-privacy-protections flag but they don’t spoof the user agent so you intrinsically have a smaller crowd to blend in with).
As it stands, Orion users actually stand out and are more fingerprintable compared to people using UBlock origin lite or Adguard on Safari as, despite having safari 26’s user agent, they have a static and non changing Canvas and Audio fingerprint which immediately sets them apart from actual safari users (they’re arguably more fingerprintable than people using Vivaldi or Brave or any other browser that doesn’t mask the user agent as those have larger user bases all with the same static fingerprint).
This would be a feature that is enabled by default and would likely not be noticeable by end users, but would improve their experience and privacy pretty dramatically as users would now appear to all websites, for all intents and purposes, as regular Safari users who have an adblock of some form or another installed, which is what we want.
