You are correct that facial recognition and any data put into facebook would still be tracked regardless of the steps you took. You’re also correct that your friends and still leak info about you. However, I strongly disagree with your criticism regarding VPNs and VMs. A VPN is something you should be doing anyway, this is not really news to anyone here. And regarding VMs, the article does not say it’s for everyone, only those with a high threat model that want to use facebook anyway. It is not true that if you browse in a KVM machine with a given fingerprint, that it would lead back to browsing outside it. You are correct that a VM is a lot of effort for most people, and in fact, the majority will not choose this route. But this is educational material for those who ARE interested, this is what some choices are.