[RFE] Ask for firewall zone upon first connection
NetworkManager has support for FirewallD zones, so it would be great if the applet could
ask the user whether it's a private (and thus the user may want to share resources) or public network (and thus the user may prefer to stay safe) when a new connection is set up, then
a) if the user says "private", then configure the connection in the "trusted" zone (could be configurable);
b) if the user says "public" or just ignores the question and closes the applet, then configure the connection in the "public" zone (or the default zone, could be configurable);
show the info about the current zone in the connection details.
Note that 1) is something that Windows 10 already does very well. Of course, more advanced users could always open the connection editor and change the zone, or even configure FirewallD directly, but this could be a huge improvement for most users.
Why? Consider Fedora's KDE and GNOME spins. The KDE spin decided to set the default firewall zone to "public", whereas the GNOME spin (Fedora Workstation) decided to set a default that leaves open all the ports beyond 1024. KDE folks' decision is great for security, but it fails miserably from the UX perspective as soon as a non-experienced user tries e.g. to share some files over the network at home: it doesn't work, and they don't know what to do. On the other hand, GNOME folks' decision is great from the UX point of oview, but has critical security implications (I don't think the user wants to share files in a café's WiFi or at the airport).
So, all in all, I think that asking once whether a new connection should be private or not and saving the proper firewall zone is the best trade-off between security and UX.