Bluetooth tracker: How to enforce pairing

I want to be sure that presence detection is safe. Do I understand correctly that current BLE Tracker can be fooled by a device what can advertise the same mac address like permitted user’s phone?

If yes, so how to enforce pairing, so only authorized devices can trigger presence detection (unarm alarm automation)?