I am no expert but it has to do with the z-wave chip and more importantly the code the manufacture wrote for this chip (not something the HE team can fix)... given this you cannot disable S0 security unless you join it using a second controller. Check out this thread foe the details —> Zooz 4-in-1 (ZSE40), C7, S0
Note: On the c7, you are prompted when devices support s2... I’ve had no issue with that... just devices that only support s0