When should BLE use Just Works pairing instead of bonding?

Use Just Works only for low-risk public reads or tightly controlled factory setup windows. Choose bonding when writes change device behavior, firmware accepts commands, or nearby phones must not replay actions. For a smart lock or valve controller, require bonded access for open and close commands and test how iOS and Android preserve bonds after OS updates.