[therein]

Why could it not be something like Find My iPhone lock/reboot request is an encrypted packet that is destined to arrive at iPhone with Serial Number XYZ. Another iPhone gets near the target iPhone and shares its presence with Apple. Apple has been waiting to deliver this encrypted signed packet from Find My iPhone network to the target device. This packet is sent to the iPhone in range and then the data is delivered over AWDL.

[rfoo]

This breaks the anonymous nature of Find My network. There might be a way to mitigate it but I'm sure that's not a can of worm you would want to open.