This is something I still don't get the point of, the need to select devices in Apps for the sake of "security". There are plenty of cases where this just creates confusion and makes things less user-friendly.
As far as "security" goes, first, if you don't trust 3rd party code, then don't install it. Second, if a developer wants to embed code in a 2-3000 line app or driver that most wouldn't bother to read through before using, it would be possible to expose anything connected to, at least, the same subnet as HE. It would also be possible to auto-add devices to any selection list, reset your hub or anything else that the developer wants to. No amount of device selection in lists prevents that, there's just too many ways around it.
Just to be clear, I'm talking about the device selection elements in Apps here, but it also applies to any other "access separation" of apps and devices or between different devices or between different apps. In my opinion, any app should be able to find and call any method in any device, and vice versa. It can already be done, just in a convoluted way.
Then someone brings up: but there's the performance penalty... The performance penalty comes from subscribing to device events, of course it's a bad idea to subscribe to all the events of all devices unless that is what is truly needed for the app to function. This is something the app should regulate and needs to be well thought-through by the developer. In terms of selecting which devices to operate on as a configuration option, then of course these device selections make sense, but for "security" or performance reasons? How does that make sense?
If someone can explain to me the reasoning behind why this is done for "security"? I'd love to know!
Same question is also valid for all other device/child device/app/child app separations. Where does that make things more "secure"? It sure does make certain features more convoluted to implement and possibly either less user friendly or very much non-standard, but "secure"? Can't see it... Too many ways around it. Even if there were no ways around it, what are you protecting against whom?
I'm sure this can be elaborated more on, but as a start, what are the thoughts on this?
EDIT: Tried to make it easier to understand, might still miss the mark...