NO, can be used as hack.
device-mode must be changeable only by:
netinstall OR ssh by authenticated user with authorized-public-key-hash only.
(about authorized-public-key-hash, they started to implement something, but then everything is stuck and unexplained)