I’m not sure where I got the notion, but ever since Bluetooth became available on my devices I’ve been disabling it under the impression that it was likely vulnerable (and my last phone kept silently enabling it every so often, which which quite annoying). Since then, a decent number of phone-side exploits of varying severity have come and gone. Now I guess the other devices are the weakest link… Security probably isn’t even much of a consideration when building such a product: “why would someone bother hacking an eatbud?”