I've figured out the protocol used by the BR-E1 remote supported by newer Bluetooth-equipped cameras (without even owning a BR-E1).
https://iandouglasscott.com/2018/07/04/canon-dslr-bluetooth-remote-protocol/
https://github.com/ids1024/cannon-bluetooth-remote