Am I being paranoid? Is encryption a standard part of the Bluetooth protocol nowadays?
Somebody with a SDR could potentially sniff a connection from pairing phase onwards and with sufficiently powerful computing power crack the keys used and thus read the keystrokes. AFAIK such a crack hasn't been reported. As for can the NSA or CIA do it? Well they're not saying.