Author of the blog here - just to be clear the Unicorn itself doesn't use Web Bluetooth. It uses regular Bluetooth LE. I don't think there's anything particularly bad about Web Bluetooth itself (Chrome pops up a prompt and the user has to explicitly choose a device to connect to), I simply used it as a quick and fun way to demonstrate the vulnerabilities in the toy.