Yeah. `.dev` is now an actual TLD; disabling security features without mentioning what they are, how they affect the issue and what is the effect of disabling them looks like a footgun.