> A probe packet contains the MAC address as well as the list of all the past Wi-fi networks that your device has tried to join before, which can reveal a lot about you!
Generally, most modern devices send broadcast/wildcard probes precisely to avoid leaking the PNL. From what I know, directed probes are only sent for hidden APs.
Correct. All major OSes stopped broadcasting the preferred SSID list by 2017, with Android and Linux being the last. Apple stopped in 2014. Windows by 2009.
And most modern devices randomize MAC addresses ("Wi-Fi addresses" in Apple-ese, for probably obvious reasons) between networks, and even between broadcasts/connections to the same network.