I have not heard from kaworu, but it seems that the serial number is indeed stored on the internal SD card. If you make an image of the card and then open that image with a binary editor (I used "bvi" on Linux) you can see and change the serial number.
Here I changed my serial number to all zeros:
So the question is what should I change the serial number in my image to be before I start giving out a download link?