What’s the security story behind the iMessage integration? Why is iOS willing to send iMessage data over Bluetooth to a device that hasn’t convinced Apple that it’s a validly authenticated device signed in as the same user?

I don’t know the full history but before CarPlay it was used to read and respond to messages using entertainment systems.

Cars probably. My car reads and sends iMessages via Bluetooth.