A DE has little to do with this, it’s a driver, it gets loaded when you plug in a compatible device, there’s no interaction. This should have been disabled 2 years ago when the gaping security holes were found, and actually Greg had attempted to have it disabled in 2022 but it kept getting pushed back.
As they point out at the end, this wasn’t about the old control panel, but the new settings panel. It’s all brand new code.