This is why WebUSB/WebBT is a good thing, you can build configuration tools that run anywhere and are easily ported offline or replicated.
USB and BT are security nightmares, and the browser is a fantastic sandbox. I'm pretty sure a lot of 0-days will come from there.