[sengork]

Spoofed yes but they're hard to guess in advance without prior knowledge of the device's MAC address.

[djrogers]

MAC addresses are broadcast in the clear regularly, so any device doing that without some randomization is ripe for the picking.

[willstrafach]

Worth noting also: You vannot randomize it when connected to a Wi-Fi network.