As a follow-on to these questions:
iOS 10 improvements:
Identifier for Advertising is now all zeroes if "Limit Ad Tracking" is enabled, presumably making it unnecessary to "Reset Advertising Identifier".
While Apple discourages device fingerprinting and data over-collection in general, and mentioned at WWDC that some APIs and properties that could be used for fingerprinting were deprecated, there were no specifics given in the talk.
As always there is basic system info available similar to what any web page can access: IP address, HTTP headers, etc. Many of these are low entropy or can be changed by the user through various means, but it may be possible to combine enough for a reasonable identification. Or for reasonable enough correlation for cross-device tracking.
There is still no official confirmation that "integrated" apps (like Facebook or Twitter) are subject to the same limitations as other iOS apps, or whether they have privileged APIs.
There are apps in the app store that show system information like uptime, battery level, disk size and usage, memory size and usage, network usage, LAN IP address, etc. These have become more restricted over the past two major versions, but is there any review or other mechanism to keep access to these system elements out of typical app or app 3rd-party code?
Can someone confirm whether WiFi AP (B)SSID is still accessible?
Accelerometer and gyroscope data
Use of persistent data stores by apps, or by apps across an app group, that survive app (or app group) deletion. Or persistent data stores that survive device erase and restore.
Other open issues?
In general, what remaining device fingerprinting privacy / security vulnerabilities still exist as of iOS 10, particularly those that have no user controls or actions that can thwart them?