This paper looks really clever, and I'd like to read it. Just a thought about something that jumped off the page at me on a once-over:

> Imagine someone wants to illegally track the position (and implicitely the time spent) by someone into a laboratory [...]

The legality of analyzing WiFi frames is a bit orthogonal to this. Analyzing these packets (in my book) is fair game. It's no different than youtube-dl -- if you send me the data, you can't forbid me from saving it for personal use, or analyzing it.

If you transmit something, and don't want it to be analyzed, the data must be end-to-end encrypted. I don't like the idea of "protecting" such data with a law that says, "this data is illegal to look at".