The important part of these are the “do, don’t” orders of business conduct. Then on top small fine. Hence it isn’t merely cost of doing business. The real stinger is “you can’t offer choice of tracking or pay up. You must offer free choice to decline for consent based operations”.

If they ignore the “do’s and dont’s” compliance order, then the big fines come out.

Atleast for android and Bluetooth. Not an absolute matter protocol thing, but probably “normal android allows that only woth google signed app”. Some OS access thing and so on. “You don’t get to access that Bluetooth matter discovery call mode etc. without official sign off, security hurdur”.

Since matter has ways to connected fully without Bluetooth depending on device. Bluetooth is just the easy simple way, instead of having to hunt for pairing QR symbols or number codes. Go to the other device makers app to activate pairing mode or generate one off pairing codes and so on.

They decided it already couple years ago. However refresh cycles are such, that only now it starts to arrive to times where changes physically manifest. Another thing which they already said back then and kinda apologised for alas sorry, changes have to wait until next refresh or next generation of the vehicle depending on timing.

Like I guess this is official official now, but design team lead or someone like that said ages ago they would be going back to more physical buttons.

Because they can’t without backdooring the software? Just like they also refuse to co-operate with Swedish government and threatened to leave the market should Sweden try to force them.

You know Russian spies can also use TOR onion routing and so on.

As for phishing there is nothing Signal can do about someone scanning a signal contact sharing QR and adding it to their contracts list beyond informative “hey are you really sure, really really sure you want to add this contact”. If user trusts someone they shouldn’t, no amount of app policy protections help. Or maybe they manage to shish them to scan and approve “share account to another device”. Again nothing Signal can do about that.