Do all PHY Ethernet chips have a hard-coded MAC address?
(promoted from comment to answer)

These addresses are used for PHY CONTROL frames only, not for normal data frames. As far as I understand such frames they are not destined for a particular node. I suspect that the actual address is unimportant, and the choice of two addresses is only for debugging and testing (so you can see from which of two sides a frame is sent).