I think having USBguard implemented in Fedora would improve physical security greatly especially on laptops, but so it doesn’t get in the way of the user in day to day use it should only block USB connections when the user is signed out or on the lock screen, once the user signs in should function as if it’s not even there.
GNOME already has a menu for USBguard in place making it easy to control see here