It's a local attack via bluetooth, location tracking is not very interesting. Recording audio likewise not all that exciting for much the same reason. The phone

It's a local attack via bluetooth, location tracking is not very interesting. Recording audio likewise not all that exciting for much the same reason. The phonebook though, that's exfiltrating PII. >In some cases pairing is possible without any user interaction. Baloney. No implementations in the wild do this, or they would have loudly trumpeted it.