The iOS device keeps seeing a random AirTag in close proximity. Even as the ID rotates, it's still about 2m away, and continues to be 2m away as you move. It doesn't know who it belongs to, but it's probably the same physical device, because it keeps going to wherever you're going.
That's a different scenario than the evil store owner who wants to track their customers. In that case, it's just a random procession of tags roaming about the store. A tag arriving at the store on repeated days has nothing to indicate that it's the same one.
So if it's being used as a malicious tracker (hidden in someone's car or purse), then the constant proximity is a clue. But if someone is trying to guess which tag belongs to a specific person, they can't unless they maintain constant contact with that tag over a long timeline. At that point, they can just see you :)