missing-root Yes, and it's actually possible to disallow WEP networks now, under "Network preferences", so the developers already implemented something like this, but I wasn't aware until now.
It's also possible to choose per-network randomized MAC under "Advanced options" before connecting to a password-protected network. However, it's not possible before connecting to unprotected networks.