A receiver could use a new random ID to call “collect” to a secure third party network which agrees to pay for the base stations bandwidth for every connection. The station then responds to the base station yep ID X’s bandwidth will be paid by vert tel.
Obviously, this doesn’t eliminate the possibility of tracking as you’d want the cell to have multiple connections created and abandoned randomly, but it does remove that ID you’re concerned with.
The solution to this is just to make it illegal to store and process the results of such analysis applied to radio signals, without consent of the data subject (GDPR jurisdictions have that already), and to enforce that law.
We could live in a world where we have strictly-enforced privacy laws. We don't, and that sucks, and if anything, we're moving further away from that state of affairs very day. But we could.