The ugly part of this is that it hampers legitimate uses of MAC addresses. People discover news devices in their network via MAC addresses and if a device constantly changes it, then it might be blocked because it is unknown.

It changes per network, or when you manually “Forget” a network. Otherwise, all connections to a particular WiFi will use the same MAC.

And what if you are managing multiple networks for the same client? Because we are doing tools for this kind of thing and this is issue at the moment. However, this is not price that Apple are paying and they are dumping it on us to sort out.