That's actually good since bluetooth alone can be used to estimate your location. If the app can see all other bluetooth names, thet can be correlated to other user's data where the oosition is known.

And if you hit "pair new device", you phone will likely blast it's name out to all other bluetooth devices, givingyup it's position to any other nosy device/app.

Same goes for wifi.

I have the same skeptical mindset as you here, but like Wikipedia still seems fine.

I think most early users do check further than open source licenses. It's possible they'll add things later, but if they add after it has enough users we have significant number of users to have some people check. And if the user base is small then they're probably more involved, or are reading/modifying code for their use cases.

Of course it's not foolproof, but it has worked for a long time because of things like that

I think for a open source projects with such a low number of users, the first few users will definitely look further than "it's open source".