<Snip - good points all>
Most of those concerns are in fact mitigated by a well implemented Privacy
implementation
Which is why I started off by mentioning RFC4191. 
-----End Original Message-----
And Vista/Win7/etc. make it even more interesting by not doing EUI64 at all.
... Hopefully they have more entropic 'random' values as well ...
/TJ