This will be easily defeatable with a crowd-sourced database.

It is not even close to easy to be able to change an ADS-B out ICAO address in avionics right now, so periodically changing these addresses won't happen in production.

When will people realize that security by obscurity doesn't work?