Which of following is $($are$)$ vulnerability $($ies$)$ of Bluetooth technology?

Encryption key length is negotiable

No user authentication exists

End$-$to$-$end security isn't performed

All of above