The MySensors project was created to bypass the rigorous rules of z-wave and closeness of their protocol and source code.
MySensors is capable of everything on your list
every node is a repeater
low power
encryption
I addition we provide message authentication and "standardized" OTA updates capability.
The latest version of z-wave addresses some of their previous security problems.. but considering their closeness it's hard to know how good they are.