Wifi drivers could easily deal with this risk by providing specific MAC addresses only to specific networks. So you lock in your home network and work network, but randomize other unknown WAPs. Or better yet, just turn off wifi when you're away from trusted WAPs and use your cellular data.