Revliss One could fake you previously connected access points, tricking your phone to connect to it. Once within the local network it becomes easy to start recording outbound connections, sending payloads, etc...
It would be possible to trick a phone into trying to connect, but successful impersonation would require the impersonator to know the Wi-Fi network's password. So an impersonator would not be able to track outbound connections because they wouldn't happen, unless the impersonator were impersonating a public Wi-Fi network and the device is configured to make those outbound connections via public Wi-Fi networks.
Revliss Moreover, sometimes you simply want to hide or be offgrid, a WiFi signal is trackable if you are in a forest, randomisation or not.
If the phone is not configured to attempt connection to open Wi-Fi networks, there shouldn't be a significantly trackable "Wi-Fi signal". It is true that running a receiver results in some leakage, but tracking that from any distance would require specialized equipment, and that leakage would be very difficult to tie to a specific device.
It is a common misunderstanding that Wi-Fi clients routinely identify themselves by sending connection requests to known networks even if they don't hear them. This is true only for clients that have saved network information for "hidden" (non-beaconing) access points, which are generally not recommended. Paradoxically, people concerned about being tracked through their Wi-Fi activity should avoid "hidden" Wi-Fi networks, or at least should be very careful to turn Wi-Fi off. In general, "hidden" Wi-Fi networks pose privacy risks rather than increasing privacy.