Apple's decision to not let users fully disable Wi-Fi and Bluetooth via settings in iOS 11's Control Center is bad UI design and compromises user security
Turning off your Bluetooth and Wi-Fi radios when you're not using them is good security practice (not to mention good for your battery usage).
Context & Ripple Effects
Two weeks after [[a:922454|MacRumors documented that the iOS 11 Control Center toggles only disconnect rather than disable the radios]] — leaving Wi-Fi and Bluetooth alive for AirDrop, AirPlay, Pencil, Watch, Continuity and location — the EFF is formally calling the design a security failure, arguing users who tap the switch reasonably believe the hardware is off.
The critique lands on a platform with a track record here: an earlier iOS flaw let a malicious Wi-Fi network crash devices into endless reboots, so persistent radio exposure is not hypothetical risk — it is the same surface attackers have already used.
First-order effects
- Users who toggle off Wi-Fi and Bluetooth in Control Center keep broadcasting and accepting connections for Apple's continuity features, so the battery savings and attack-surface reduction they think they bought never materialize.
- Security-conscious users are forced into Settings to actually kill the radios, making the Control Center toggle misleading UI for exactly the people who rely on it most.
Second-order effects
- Apple faces renewed pressure over user control of its own hardware — pressure it has yielded to before, when Tim Cook committed to letting users turn off the battery-management throttling feature after backlash, setting a template for reversing opaque defaults.
- Enterprise and privacy-sensitive buyers get another data point that Apple's ecosystem conveniences (Continuity, AirDrop) are wired to stay on by default, complicating procurement decisions where radio hygiene matters.
Third-order effects
- If the pattern holds, OS vendors will keep subordinating explicit user control to always-on ecosystem features, pushing security advocates toward regulation-by-design arguments like the ones NHTSA floated for phone software that limits functionality while driving.
- The deeper structural question is who owns the off-switch: as radios become infrastructure for vendor services rather than user utilities, 'disable' becomes a marketing term unless standards bodies or regulators define it.
The trend: Mobile operating systems are quietly converting user-facing controls into ecosystem-preserving hints, with security advocates and regulators increasingly contesting what an off-switch must mean.