Reminds me of the "For the love of God, never do this" proof-of-concept I wrote but never shared where I used history.replaceState to scroll a message in the address bar.
(Among other reasons, when I tested it, it appeared to be causing pathological thrashing in the SQLite database Firefox uses to store history and bookmarks information.)