Are you authenticating by using the Wifi and Bluetooth addresses for input? What would stop someone from spoofing the known devices if so?

Just wondering about the setup.