Query Apple's FindMy network with Python

I'm also interested by the Haystack project to have an ESP32-based object identify as an AirTag and be able to follow it

Does anyone knows if their approach is "sustainable", or if Apple can easily "block out" such hacks from their network?

If it functions exactly as an AirTag does then it would be hard as they would not want to block all previously sold AirTags

Is there something it can do to whitelist legitimate AirTag serial numbers?

I don't think AirTag work that way. AirTag protocol is specifically designed so Apple or other parties will not be able to track users by serial numbers.

Where there's a will, there's a way. Apple is very clear law enforcement can approach them with any AirTag and they will immediately be able to tie it to a user.

They do, Airtag hardware need to be signed to add to your iCloud account. But the actual location beacon messages are not linked to your iCloud account and can’t be associated with the sending airtag.

One doesn’t exclude the other - a physical airtag may have an ID available, but not broadcast it anywhere.

Also, “when there’s a will…” doesn’t really apply to cruptography

That is not the same thing.