you are vulnerable during pairing which is for like a minute.
I said this twice on the PSA: it’s hard to tell if your device is in discoverable mode, and it’s easy to forget it in that state, or start it accidentally. I’ve caught my devices accidentally in discoverable mode many times. You could have your PC a whole week in discoverable mode and never notice it, just by having a settings window left open.
It’s more risk than most people should take, hence the warning.
Still, if you’re comfortable with the risk, you’re free to change the config and allow insecure devices.
@[email protected] @[email protected]
A fix has already been published to Steam stable on Flathub. Workarounds can be removed now.