There's also other identifiers on the phone. IMEI for example.
Also: List of installed applications Accounts on the phone Phone Serial Number
All this is why I root phones, use the work profile, etc, to limit what apps can access. If preventing access to this info breaks an app, well, I just don't use that app.