Unless there is an API to actively limit the broadcasting signal strength via BLE that authenticator implementations could leverage, I don't see how. And even

Unless there is an API to actively limit the broadcasting signal strength via BLE that authenticator implementations could leverage, I don't see how. And even then you'll quickly run into problems when the attacker's receiver has better antennas in better locations than e.g. the user's laptop.