Use random per network, instead of per connection
this way you can harden your network a little bit by whitelisting mac address, thought smart attacker can spoof it easily, by catching it while you're connected.
so power off wifi router, if it's possible, or at least wifi, when you're out, and connect other devices (maybe smart home) via wire so it's not possible to catch and spoof wifi mac, because your per network mac is out of reach, so attacker can catch it only when you're connected. also have wifi auto disable on gos device, especially if you made your wifi hidden because it searches for it all the time, when not connected, and this is surface of attack, i.e. they not only can catch that mac and wifi password, when you're out wifi location but can create hotspot with same name and password and you'll leak them data pockets.