Basically any device can be seen as compromised if anyone malicious had hardware or root access - including the manufacturer. If you don't trust your manufacturer, you have far bigger problems than bluetooth IDs in the log.
How is that not the story here?
I'm not saying this isn't a problem, I'm in the same boat here, just that the contact tracing app doesn't really add to it.