I'm not in the security field but it still surprises me how many people don't realize how easy MAC address spoofing actually is.

I generally describe it as the digital equivalent of swapping the plates on your car.