Some services, such as the Object Push Profile, elect never to explicitly involve authentication or encryption so that pairing does not interfere with the user experience connected with the service use-cases. Some sort of DoS can also be achievable, even in modern devices, by sending unsolicited pairing requests in https://www.bluetoothspeaker.top/bluetooth-speakers-in-bd/