Range without an antenna is around 10-20cm. I was able to hold my RPi next to my ceiling fan and control it, but obviously that’s not very practical.

Theoretically you could exfiltrate data with it, but if you have root access to the RPi already then I don’t see why you wouldn’t just use Wi-Fi.