The second attack you linked is yet another completely different threat model. It requires running malicious software on the device to be tracked. From the pape

The second attack you linked is yet another completely different threat model. It requires running malicious software on the device to be tracked. From the paper: The Trojan code runs on the computer to be tracked. It retrieves the advertising address, acquires the matching public key from our server, and then advertises lost messages That's about as active as it gets! The first one describes radio fingerprinting, which is relatively new, concerning, and might be tricky to address.