The channel is probably encrypted. If it is not, then just write a bluetooth driver, I don't think that the way you are doing it is enough to intercept a modern bluetooth link. At least not the kind of links we have in my country... Sandbox does not block bluetooth. Sandbox does not block kernel extensions. Go to the library and pick up a book if you can't find online, regular pentesting is crucial to even try to maintain your posture in today's world. Just stop speculating and start executing.

You need to google the vpn company's countries law about can they remain completely dateless. If you live in any superpower they tap all your telemetry.

Hello, I used my 15 pro max as a thread router with 4 simcards, 2Gb/s each and bsd based firewall (prebootBSDvpn) that is the only one that does not leak according to our Finnish defense forces cyberwarfare unit reservists, who are our red teaml. It also had pretty modified kernel but nothing special but the for the Darwin/nextstep/iOS had to prettty much go. I had permission for this from apple but I can't disclose details, Check nextstep and bsd dokumentation, or just put a put a 5g dongle or rj45 on it and make the drivers in Xcode.