HTML5 can also give a lot of information on your resolution, how your browser renders elements, etc, all things that can be collected and matched to a database with or without a VPN and are done in plain HTML+CSS. There's no silver bullet, Tor has anonymity (if you take other steps) but its security is some of the worst in a browser,

2/3