Re: Yes, that's one of the bad design decisions of USB
"Or for a far simpler solution - just don't respond to devices being plugged in while the OS is locked."
Sometimes, the OS needs to install hardware while it is locked. If you replace your keyboard, for example, and you must enter a password, how will you enter the password if new hardware is not installed until after you enter the password?