I think the difference is that, on Windows, there are background services that constantly ping Microsoft with the device ID. A device ID on its own is not really harmful if it's not exposed to the internet.

I mean, there's a ton of unique identifiers on machines already tied to hardware and disks, but that must be a systemd thing since my Devuan machine does not have it.

But given there's no cloud accounts on linux I would imagine it's trivially changed just like a NIC's MAC

Also, seems unlikely it would be used for any single-signon with cloud services.