Oh and a mac address is hardly a fingerprint because as you pointed out yourself mac spoofing exists.