decompiling the apk is where you might trip up against DMCA etc. I've been doing this exact same thing with great success, if there's a mobile app you have the keys to unlock any bluetooth device (and maybe turn it into a Home Assistant component while you're at it).