Instead of timestamps, use the browsers built-in secure random number generator. Anything else can be guessed/computed.

Because any kind of predictable noise can be easily calculated and removed. And randomized noise that changes on each call can be removed by making the call multiple times and averaging out the values. So a constant noise value isn’t the worst possible idea, as long as it cannot be retrieved of course.