What security do you have?

For OTA we use Private-Public key encryption method with ECC to make sure no one is able to update your devices with malicious code. For Bluetooth protocol, standard Bluetooth security methods are used.