Are you authenticating by using the Wifi and Bluetooth addresses for input? What would stop someone from spoofing the known devices if so? Just wondering about

Are you authenticating by using the Wifi and Bluetooth addresses for input? What would stop someone from spoofing the known devices if so? Just wondering about the setup.