I still think LTE is the most likely attack vector, and there's a reason the attackers chose it. Even purpose-built "low-power" cellular IoT chips draw hundreds of milliamps during transmission, well within the detection envelope of the proposed circuit.
Bluetooth is a more interesting counterargum...