Agreed – and MeshCore follows a similar "security on the radio" design. With the "cell phone + companion radio" setup which is currently very popular, it would

Agreed – and MeshCore follows a similar "security on the radio" design. With the "cell phone + companion radio" setup which is currently very popular, it would seem the correct solution is to perform encryption on the phone – using the Signal protocol – and use the companion radio only to send/receive these blobs. This has the added benefit that you can pair with _any_ arbitrary companion radio, rather than your identity being tied to one specific radio you own.