Here is a discussion by the SUSE Security Team of their review of KDE6. For me it cast a lot of light onto the murky behind- -the-scenes D-Bus and Polkit.
If you are a TDE developer or power user you might want to take a look.
https://security.opensuse.org/2024/04/02/kde6-dbus-polkit.html