[jve]

> These metrics even include MAC addresses.

MAC address SHA256 hashes, to be precise.

[account42]

MAC addresses are only 48-bit and sparsely allocated (i.e. the first half indentifies the vendor). I wouldn't be surprised if the hashes for all normal hardware (i.e. with known vendors) can be easily brute forced.