It's a good idea for MAC filtering, it stops my bro however like you said spoofing can throw all that in the can. However spoofing, if you know how, is pretty simple.
RADIUS SERVER!
Yeah, spoofing is easy... knowing what address to spoof is another story.