[calani]

You're missing the point.
The CLIENT (as in graal.exe) gets the client's (local computer's) MAC and sends it to the server. Think of it like a second username or something, its just data that's being sent for authentication.

You're thinking of it as the server is reading the last hop's MAC from the packet's header (which changes with every hop), not from the data portion (which never changes).