Well I thought of that for a while.

1) Any data that could pass through a router can be viewed by owner of router (all he/she has to do is setup something to intercept what your sending). So if you logged into anything personal, bam. It's unlikely most people would know how to do this though.

2) MAC addresses, they're suppose to be unique (though they can be spoofed quite easily nowadays).