MAC is easily spoofed, most smartphones do it already by default - although only per session