But it's so easy to defeat with a device that would random delays to packets, maybe even shuffling their order a bit. It does not need to unpack and process the packet, only record and check boundaries, even simpler than a switch.

Would introduce a configurable amount of delay variance,

Would attach directly to the Ethernet port, before the patch cord going to the rack's router.