As far as I understand the "vulnerability" (it's really AirDrop working as publicly documented), it happens when you attempt to share content, not when you're visible for receiving content.