When I connect most Android phones to a Windows 7 computer via USB, Windows will install the appropriate drivers for the device.
My (possibly incorrect) understanding is that those drivers come with Windows or, if needed, are downloaded from Microsoft servers. Since the drivers are provided by Microsoft, they have approximately the same trust level as anything else that comes through official Microsoft channels.
When I plug in a ZTE Android phone to a Windows computer, however, I get a unique menu on the phone. Three of the options are expected:
- Charge only
- Media device (MTP)
- Camera (PTP)
The fourth option is not expected:
- Install driver: Select this option when features (Connect to PC software, Media device) enabled for the first time, or when they're unavailable.
Is option #4 transmitting a driver contained on the phone to Windows? Or is it just signaling Windows to find it's own driver from Microsoft?
If the Windows driver comes directly from the phone, that would present a significant security issue.