Why not simply disabling "back to my iPhone"? I question its value against theft - thieves these days know about taking your device offline. Sure, it is useful if you forget your phone somewhere, but how often does that happen?

It seems the intrinsic risk of attack you expose yourself to by having "back to my iPhone" enabled is greater than the risk of forgetting your iPhone somewhere...