SO (MISO) should generally be high impedance if not selected...

I suspect this causes SO to always output the same value and the Ethernet controller must expect some magic

Thanks you for refreshing my memory, I learn about that in college twenty-something years ago but never used that knowledge!