You are right, you should definitely not feel safe when using a generic network name. In the file that OP posted, the MAC address was missing though. Doesn't mean that it wasn't present on the device. Android used to write the MAC address to logcat, nowadays it's off by default. Sometimes the MAC address of a network gets stored to wpa_supplicant.conf. I'm sure that NetworkManager reports the mac address in journald as well.