It seems as though these IDs are generated on the server. Leaking the MAC address of the server seems inconsequential to me.