Some services, including the Object Push Profile, elect not to explicitly require authentication or encryption so that pairing does not interfere with the user knowledge involved with the service use-cases. Continue to questioning if it makes a true variation? One new fanatic on r/BudgetAudiophile shared their honest surprise: With https://www.bluetoothspeaker.top/wholesale-waterproof-bluetooth-speaker-portable-mobile-phone-wireless-rgb-speaker/