Default Cleartext Block Misunderstanding

A recurring Android security shape where developers misunderstand the platform’s default blocking of insecure HTTP for API 28+; the resulting tension is whether to add network_security_config.xml, but the best outcome is doing nothing unless an explicit exception is required.