While trying to find a browser add-on for the above, found that Facebook detects NoScript and adjusts links accordingly [1]. In other words, the list of add-ons is used proactively to try to bypass some of them.

[1] Excerpt: "Facebook seems to detect an active NoScript and replaces external links with tracked ones." from https://addons.mozilla.org/en-US/firefox/addon/google-privac...

The list of fonts is only available through flash, so if you get rid of flash (either permanently or with flashblock) that should cut down your fingerprint a bit.

It's also exposed to javascript and CSS. With a list to test, you can generally evaluate the fonts installed on a system without using Flash.