So, each gadget broadcasts its unique ID and current coordinates into the mesh. Is that in plaintext? What prevents someone from collecting all that data? What

So, each gadget broadcasts its unique ID and current coordinates into the mesh. Is that in plaintext? What prevents someone from collecting all that data? What prevents someone from following arbitrary people who haven't "bonded" with them?