device identification, VPD 0x83

What is the alternative to providing a device identification if the device doesn't provide one (assuming scanning from userspace)?

My thoughts are that since device identification is a property of the device, it should be provided by the kernel if the device supports it (VPD 0x83 is mandatory).

The reason is security and configuration.

A LLDD can always filter or emulate it (depending on the bus it's using, e.g. USB Storage) if the device itself doesn't provide it.

Comments?

Luben