>> MACs can be spoofed quite easily
True, but you kinda need to know what ID to spoof; that’s a little bit harder of a problem. Not insurmountable, but harder.
Then break out Wireshark and start sniffing traffic. ;)