That's excellent!
I don't think that could be prevented, either. You could have the protocol exchange signing keys at the start and sign every message, but it's stretching the amount you can do with available audio bandwidth already so I expect that either wouldn't work or would become unbearably slow.
Signing the transmission isn't enough to prevent a replay attack.