ryrona
What OS version is running, and timezone and country code, and developer options enabled and such things doesn't really leak that much information,
The only valid thing on this list is timezone. Country code? You mean the one extracted from the SIM so your country code is the same across all the profiles? I think Accept-Language should be enough for the websites; local apps can use Locale.getDefault().getLanguage() or Locale.getDefault().getCountry(). Granting access to the immutable physical identifier is a lot.
Re: OS version: ideally it would be possible to mask this for example to prevent targeted surveillance/ads/honeypot operations.
IMO apps should NOT have access to any hardware, hardware-derived or immutable identifiers, or to the data found in the wild to exploited to deanonymise users (eg battery status, EXACT install/update time, EXACT amount of the disk space, DRM access indeed, etc)