Again, as the OP said, one has to be searching for wifi devices, and someone else on that network has that brief moment to inject themselves into the other phone. And the damage? Reboot!
Microsoft has "rebooted" many relationships with partners and written out third-party vendors by adding their own apps and extensions. They spent much time and resources on giving their own programs the inside track, and slowed or restricted others from these same connections.
They did all this instead of writing in better security, interoperability and using established standards.