It could use many of the existing access control methods already in the kernel. No extra kernel complexity required. e.g. the advertising ID could be stored in

It could use many of the existing access control methods already in the kernel. No extra kernel complexity required. e.g. the advertising ID could be stored in a file with appropriate permissions. All the API needs to do is open the file and read it out.