Not just "convenience vs. security", also the plain old "backward compatibility vs. security". The BlueZ vulnerability was patched years ago but it was not enab

Not just "convenience vs. security", also the plain old "backward compatibility vs. security". The BlueZ vulnerability was patched years ago but it was not enabled due to backward compatibility concerns: diff --git a/profiles/input/input.conf b/profiles/input/input.conf index 4c70bc561f..d8645f3dd6 100644 --- a/profiles/input/input.conf +++ b/profiles/input/input.conf @@ -17,7 +17,7 @@ # platforms may want to make sure that input connections only come from bonded # device connections. Several older mice have been known for not supporting # pairing/encryption. -# Defaults to false to maximize device compatibility. +# Defaults to true for security. #ClassicBondedOnly=true # LE upgrade security