You have to provide location access to enable bluetooth which means things like this story of the most unethical thing this former Twitter employee was asked to build are possible: https://twitter.com/stevekrenzel/status/1589700721121058817