It's undoubtedly a very custom implementation. And it seems very likely that at least with video, it's vulnerable in the same way that QR codes are to remote pairing. It seems that fundamentally trying to limit pairing to devices that are close using some sort of optical system is prone to exploitation. Is there a reason this is essential? Can you add something else to verify the devices are in proximity? such as Bluetooth?