> And by that I mean, using the database itself is simple. But when it exists, then a list of targets for an attacker to emulate also exists.

Recognize USB devices by serial numbers, not the manufacturer ID. Even if they could get their hands on the serial number of my car stereo, that's going to be after the same warrant delay this thing protects against.