“Once connected, an attacker can do everything a legitimate device can do, listen to the microphone, play music, see and pause the music that is currently playing from another connected device”
Apple’s Fast Connect shaves connection time from about 1 second to 0.5 seconds. To get there, AirPods skipped checking whether the other side had authenticated or turned on encryption. Anyone with the AirPods’ Bluetooth MAC address got the microphone. The fix only installs itself next to an iPhone or Mac, so Android users get told to visit an Apple Store.