Good article (fast company):
QUOITE Tapping on the prompt will take the finder of your AirTag to an
Apple support page featuring the AirTag’s unique serial number and—if
the AirTag owner so chooses—the phone number of the AirTag’s owner so
the finder can call or text. /QUOTE
A better interface would be for the finder to enter information via the
Apple site and that could be relayed to the owner. Then the owner could
decide on contact method. This can be anonymized both ways until trust
is established.
QUOTE Right now, the AirTag needs to be out of range of its paired
device for three days for the sound to emit, but Apple could lengthen or
shorten this time via a software update in the future. /QUOTE
Aha! We're in the cat tracking business.
QUOTE Though you wouldn’t be able to find out the owner of the AirTag
from this serial number, Apple could determine the owner since the
AirTag’s unique serial number is associated with an Apple ID during its
initial Pair Lock setup.
“If you are concerned that there’s a risk of your being tracked you
could contact law enforcement,” Drance notes. /QUOTE
Sandpaper will slow that process to a crawl I expect.
QUOTE “What the [AirTag’s] serial number is used for is when you first
set up your AirTag it is paired with an Apple ID along with some
additional information such as your name, your email address, your date
of birth, and things like that, which [Apple] could provide to law
enforcement if asked for, with the proper warrants and process.”
How hard is it to fake an Apple ID on a 2nd hand iPhone? Not very.
16 is a reasonable limit I suppose though I don't see why it would be
limited. I assume that they can be de-commissioned at some point(?).