Any Bluetooth device should always ask the owner if it should accept pairing.
I havent had that many Bluetooth devices but they have all been set up that way with the exception of a Bluetooth telephone earbud but it did not have any data to share.
Part of me wonders if at least some of these stupid vulnerabilities were deliberately put there, at the request of some government agency (domestic or foreign) .