Can we use Bluetooth in High Security Applications?

We are planning to use Bluetooth Low Energy (BTLE) to authenticate people via their Phone (_or other BTLE capable device_) in order to enter the house [`@home`](https://github.com/dwyl/home/).


We know this is how the keyless entry works on Tesla Model 3:
https://www.tesla.com/support/car-safety-security-features

We need to investigate if the Bluetooth Identifier for the device can bee _spoofed_ or if there is any way to crack the data transmission. We are going to be entrusting a _lot_ of value into this system so we need to know that the foundations we are building on are rock solid.

So far this is what I've read:

+ Is Bluetooth 4.0 traffic encrypted by default/design?
https://security.stackexchange.com/questions/100554/is-bluetooth-4-0-traffic-encrypted-by-default-design

+ Is it possible to spoof a paired Bluetooth device?
https://security.stackexchange.com/questions/139854/is-it-possible-to-spoof-a-paired-bluetooth-device

# Todo

+ [ ] Research if the ID of a Bluetooth device can be spoofed the way a MAC address can.
+ [ ] Investigate if anyone in the Blackhat community has successfully cracked a Bluetooth v4+ transmission and if it's documented anywhere.