I'm assuming I can opt-into the threat, i.e. it's possible for me to disable Bluetooth to remove my exposure to this class of attacks. When I turn on my WiFi I know that I'm subjecting myself to de-auth attacks, for example.
I can't opt out of a hardware attack once a malicious repair shop has replaced a critical module in my phone with their own.
Like I said, I'm more concerned with the latter. It doesn't mean I'm not concerned about attacks from external devices too.
> can't opt out of a hardware attack once a malicious repair shop
So apparently you forever disable Bluetooth out of concern but at the same time think it is unavoidable to leave your iPhone unattended at random repair shops? At least the maid stuff (even if astronaut-level engineering) is remotely plausible.