Thinking in terms of database management systems I would think these systems collect enough unique info that they probably can use 'composite-keys' to sort through collected content. If thats the case then they can probably filter out all of those fake MAC addresses with relative ease, but I like where your head is at.