KDE Connect should only enable downloading files from allowed directories, right? [issue report found, may be very old notifications]
I was working on some stuff on my PC and stepped away for a bit, and on returning noticed notifications on it that some files had been downloaded via KDE Connect from my phone. I was using my phone at the time, and didn't send the files....