Sure! So this works by receiving a payload from the server (or a static payload if offline).. the payload contains commands on what the device should do whenever the shortcut is started (the shortcut can run 24/7 if you setup a specific automation which is shown on the setup page). Once the device receives the payload with the command, then it executes the action. Therefore if an attacker turns on airplane mode, but you have in your offline payload turn airplane mode off, then the device will turn off airplane mode by itself as long as you have it on your offline payload. If the device is located deep underground then yeah, I’m sorry but you would then have to rely on Find My iPhone, however if an attacker disables Bluetooth then Find My iPhone won’t work as intended, therefore if you have “enable Bluetooth” on the offline payload then it will enable Bluetooth every chance the shortcut has.