Only approve a request you opened yourself. If a prompt appears you did not go looking for, it is a “no”.
Only during the attended box ceremony. This phone creates the passkey first; the ceremony pins it before anything registers.