Having now an EE SH2 (renewal so phone forced over to BT/EE DV) I see 5ghz & 2.4ghz hidden SSIDs drop for a few mins (at times alternate & then both together) then pop up again. Mac address for SH2 hidden SSIDs I'm seeing are variants of 1st & last 2 hex digits.
