Comment by ElectRabbit

On the HCI interface. That's not a OTA attack.

If an attacker can write raw data the HCI interface you are doomed anyway.