Twitter has a history of tracking down leakers by watermarks.
https://theintercept.com/2022/12/15/elon-musk-leaks-twitter/
Nitter might want to make sure that their scrapes are bit-identical to other accounts to defeat this.
Threat model a bit different, they can just request xcancel.com/unique-string and check what IP or account requested unique-string IMO
Threat model a bit different, they can just request xcancel.com/unique-string and check what IP or account requested unique-string IMO