Describe the risk of fingerprinting BT devices.

This doesn't change the required behavior for device IDs.
See #4 for discussion.