Even if you have to deliberately enable a setting and enter a pairing code? It's like saying that the fact the user knows their own password is a vulnerability

Even if you have to deliberately enable a setting and enter a pairing code? It's like saying that the fact the user knows their own password is a vulnerability because they might enter it to log into their account.