ColaZero I am not an expert on this. My understanding is:
- Modern Android does not allow apps to access MAC addresses without elevated privileges (source source),
- But there have been bugs, e.g., CVE-2023-21462.
If it is true that apps can access MAC addresses only by exploiting vulnerabilities, then exactly which MAC addresses are available would depend on which vulnerability is being exploited.