Let’s see how hard it is to neuter the sound generation within the AirTag itself. If it’s silent itself, an Android or no-device trackee is vulnerable.
There is not much tech that lacks unpreventable malicious use. Needs to be expected for pretty much anything.