I know there are scams that convince people to install malicious apps that steal crypto or whatever. So long as there's always a workaround, I guess I'm not super opposed to protecting people who are... easily scammed. I don't like the waiting period part though.

Gonna be pretty embarrassing when people still get scammed even with this feature in place. I've already heard stories of some old person buying like $2500 worth of gift cards and the cashier, who has been prepped for this exact scenario, is powerless to stop them.

"Is someone telling you to buy these gift cards to settle a payment?"

"....n. n. no I need them for Christmas gifts."

"It's common for scammers to tell people to lie about why they're buying the gift cards. If someone told you to say that to me, they're lying to you. No legitimate business or government agency will require you to settle a payment using gift cards."

*clearly nervous but also now getting angry*
"No I need these for my grandkids!"

*sighs. Starts scanning cards*

The idea is to make it so convoluted that normal users won't go through with this, if a friend tells them this is how to install an app that actually acts in the interest of the device owner. Either that, or it becomes so normal that most people will just do it without a thought, and then it fails to protect anyone from anything.

I like the cooldown as a protection, though. But given what else you can do with an unlocked phone without a cooldown, it seems overkill.

I wouldn't stop at "mildly"