While this is a decent stop gate measure, I think Microsoft could remove this issue in its entirety in a way that's not overly intrusive: Every time you plug in a new device open up a dialog that says "We have detected a new {x} device and will activate it in 10... 9 ... seconds" with an option to activate right away, block the device, or approve for automatic activation in the future. This way you would notice if you plugged in what you thought was a usb stick, and it showed up as keyboard to block the device before you encountered an issue. On the same token if your main keyboard broke, and you had to replace it, you could do so without having to restart your computer.