Some services, including the Object Thrust Profile, elect never to explicitly need authentication or encryption so that pairing does not interfere with the user experience linked with the service use-cases. The Clip four from JBL is definitely a little larger than I might’ve anticipated when looking at marketing images. https://www.bluetoothspeaker.top/soundcore-bluetooth-speaker-with-360-sound-light-show-12h-battery-ip67/