Comment by mmastrac

In theory you probably should have low-level access to your attached BT radio itself, so this is just kind of expected, isn't it?

I prefer when devices have these low-level interfaces. Perhaps the problem is the lack of documentation rather than existence?

I used to use the memory read/write commands via USB on Qualcomm radios to unlock and otherwise take ownership of otherwise locked-down devices. Given that was a full OOB read/write I'd consider that maybe not great, but if this is only accessible from flashed code all the better.