ElectroLisa

The issue is Windows 11 which does BIOS updates as a part of it’s Windows Update service

I agree, but at least it’s not an app you have to download, which turns out to be Electron/CEF/etc.

You’re right, one of the guides I’ve found explicitly mentioned that, and recommended toggling the rules on only when you need it.

If I’m not mistaken, you can make rules per device ID. Keychron devices show up as a keyboard/mouse and a “Link” device. You could make a passthrough rule just for the Link, thus not granting access to the actual input device.

Could you elaborate on the OpenRGB thing? I’ve used it a few times but never paid attention to the rules it asks for

You can configure Keychron peripherals via their website - Keychron Launcher.

It works on Linux, but there are two caveats:

1. Requires Chromium web browser. I’ve tested it with Ungoogled Chromium and it worked fine.
2. In some Linux distributions you will have to set up udev rules, to allow access to USB devices

I’ve tested it with my Keychain K3 keyboard and M4 mouse and it works.

I agree a compatibility with ex. Piper would be neat though