put this in /usr/lib/NetworkManager/conf.d/30-nm-privacy.conf, reboot
[connection-mac-randomization]
ethernet.cloned-mac-address=random
wifi.cloned-mac-address=random
this is not the only way that carriers can detect tethering:
- mtu detection
- dun apn usage
- deep packet inspection