There isn't much motivation for a hacker to exert effort to crack my Bluetooth. What is he going to see, how fast my engine RPM is at idle?
When I have sensor data in my car that I worry about someone stealing ----AND---- that person is within range (10 to 30 meters) then I will worry about it.
Fact is you said something foolish regarding Bluetooth security concerns and the ELM327, just admit it.