Pull request 14936 would revert the default USB and Thunderbolt authorization, and remove the setup and removal commands, automatic enrollment, the menu entries, and the default USBGuard package entry. acrogenesis opened it. It closed without merging.

Pull request 14938, opened by omarchybot, closed without merging as well. Its text says it reverts that authorization and removes the installed protection, restoring the previous behavior for USB and Thunderbolt accessories at the maintainer's request. It says a source revert alone would leave USBGuard blocking devices without approval commands.

Pull request 14937 stays open. It proposes that unfamiliar USB and Thunderbolt devices be blocked while the screen is locked, while boot input and ordinary unlocked use stay automatic, with no per-device approval prompts. Devices plugged in while locked would be allowed after unlock. An optional menu path would also require approval while the screen is unlocked.