Some services, including the Item Thrust Profile, elect to not explicitly have to have authentication or encryption so that pairing does not interfere with the user encounter linked with the service use-cases. Some form of DoS can be doable, even in modern devices, by sending unsolicited pairing requests in https://www.bluetoothspeaker.top/portable-bluetooth-speaker-2025/