Scientists in Germany have demonstrated a startling new form of surveillance: identifying people using nothing more than ordinary WiFi signals. By analyzing how radio waves bounce around a room, researchers can effectively “see” and recognize individuals — even if they are not carrying a device and even if their phone is turned off.
It’s also only possible because the information they used (BFI) is unencrypted.
I would expect them having access to that anyway when they control the device, or when they are the manufacturer