[p_l]

Unfortunately, depending on country the same legal rules that make SSID mapping legal without any requirements for opt out are also rules that protect your freedom in other ways[1].

The proper way would be to design the protocol so that the identification information is useless in addition to disabling SSID broadcast.

That would of course mean that joining a device to network would be way harder unless you enabled at least network name broadcasting, which enables tracking again.

[1] under polish law, majority [2] of uses of received broadcast/shared public medium signal, is automatically legal. The only provision of privacy is encryption of said signal, because it's treated like shouting the information in public space.

Bypassing encryption is what turns it into unlawful violation of privacy.

[2] for historical reasons there's a mess involving radio&TV tax which was supposed to be paid per receiver, a bit like UK TV license.