They can use "headers include random things" as a filter like they do with other headers presence/absence/value already. I don't think defining "random things" would be too hard for them.
2. They would have to track the noise over page requests to know that it was noise. The saving of and correlation of the saved state would be a pain.