Yes, you are right, initially the serial number is not transmitted to the network.
But if we hypothetically assume that a malicious exploit has crept into the system, then it can do this
dirty trick.
Therefore, I want in advance to prevent such a dangerous possibility.