Just strange to use HTTP for comparison when the actual problem works just fine.
If I'm connecting to WiFi normally, and expecting that I can be tracked, there isn't a vulnerability.
If I'm connecting to WiFi using this privacy feature, and expecting NOT to be trackable, yet someone is still able to track me, there is a serious vulnerability!