You are absolutely correct. Scan-guns and voice phones cannot do AES encryption because thier nics are built with RC4 encryption engines and can only do WPA or WEP (they both use RC4). I was merely pointing out the most secure setup. The more traps you throw up the less I am going to try to get on your network. Most 802.11 airjacks are people looking for free internet, if you want to provide internet for free then do nothing.
Hidden SSID's take one packet to discover because the ESSID is always part of the 802.11 header.
The new WEP cracking tools take 3 minutes worth of null packets, or 1 minute worth of traffic to defeat wep clients utilizing weak IVs.
I can spoof a valid mac and you will never know, unless your AP supports 802.11 session numbering, most don't.
I guess you gotta decide what you want hidden, if you are surfing porn you don't really need anything. If you are going to your bank, you want very strong encryption (so DNS replays don't send you to my logging server).
WEP with an L3 encryption is pretty strong stuff.
If you want to really learn how to break into wireless networks you need to see this class one of my co-workers authored.
http://www.hotlabs.org/wlsat/