This. I'm a developer, I've published Android apps, & I've still managed to lose access to a device that had dev settings enabled purely because remote adb enablement is a (extremely fiddly) toggle that happened to be off on the device at the time the screen broke. Having these two enabled simultaneously is such a rare case in the wild as to be entirely negligible as a vector.

▲

wahnfrieden an hour ago | parent [-]

Sometimes attacks happen from users being instructed to enable settings in order to achieve something regardless of whether you’d expect them to have a reason to use the setting

	▲	atty an hour ago \| parent \| next [-]
		Sure, sometimes people get social engineered into taking money from their bank account and giving it to criminals. Should banks stop allowing withdrawals?
	▲	tyromaniac 28 minutes ago \| parent \| prev \| next [-]
		If someone is willing to click on build version 5 times and then gets a mystery prompt about dev mode, and still goes along with the next 4 steps I think they were gonna get hacked a billion different other ways
	▲	Hizonner 29 minutes ago \| parent \| prev [-]
		... and it is stupid to try to protect cretins who would do that by screwing everybody else.