Pretty much this.

They behave like standard HID devices unless they’re scripted to emulate something else, like say a network interface… not really a feasible thing to fullt mitigate, and probably not worth worrying about IMO unless you’re a bank or something