One other issue is that MAC addresses are allocated in contiguous blocks to manufacturers. If you know the general pattern (the first N characters are manufacturer-specific), there is precious little stopping you writing a script to loop through all the possibilities and spam the server with them. Most network devices have the MAC address printed on a label (with a barcode for an admin to scan), so it would be trivial to grab an example from a photo.