Wouldn't it be trivial to detect a pulse with IR similar to how it's done with other devices?
Now, one may point out that if both pieces of information were being kept entirely private and were being secured with industry standard security this different wouldn't matter. I'll leave the implications of this for the reader to ponder upon.