> The threat model there involves a malicious person being close enough to connect to the speaker (Bluetooth range is about 10m); in that case you've got bigger problems than someone being able to remotely turn your dishwasher on.
Not necessarily. How about a burglar outside the house, bluetoothing in to get alexa to open the front door?