At least under Linux, you could -theoretically- verify the type of a connected device and only load and bind drivers you are actually considering to use on that

At least under Linux, you could -theoretically- verify the type of a connected device and only load and bind drivers you are actually considering to use on that device. https://www.kernel.org/doc/Documentation/usb/authorization.txt https://www.kernel.org/doc/Documentation/usb/authorization.t... As far as I understand this, I think it still reads the USB descriptors (which itself has been shown to be problematic in the past), but postpone binding the drivers (thereby locking out an enourmous amount of potentially buggy code from automatically starting to work on your USB device's maliciously crafted data).