This is the week DJI stopped arguing and started submitting evidence. Last roundup, Autel walked into the docket and broke ranks with a Fifth Amendment due-process attack — a fight about process. This week, DJI answered the other half of the question: substance. An independent US cybersecurity firm bought DJI gear off retail shelves, spent five months trying to break it, and came back with zero critical, high, or medium findings. At the same time the public-comment record crossed 3,000, and the argument winning in those comments isn't about China — it's about a fire department's budget. The FAA turned eleven World Cup stadiums into no-drone zones backed by FBI seizure authority. And buried in an FCC filing date is the rare piece of genuinely good news for US buyers in 2026. Five stories, in priority order, with our take on each.
1. DJI's independent US security audit comes back clean — the factual floor under Autel's procedural ceiling
On May 28, 2026, DJI released the results of an independent security assessment conducted by OnDefend, a US-based cybersecurity firm staffed by former military and government security professionals. The methodology is the story. OnDefend tested a DJI Air 3S with the RC 2 controller and a Matrice 4E with the RC Plus 2 Enterprise controller — and the test units were "procured from retail outlets and dealer stock without pre-notification to DJI," which pre-empts the obvious rebuttal that DJI handed over sanitized hardware. The assessment ran from October 2025 through March 2026 across three domains — data sovereignty, hardware vulnerability, and drone-manipulation risk. On the software side: static and dynamic analysis of the DJI Fly and Pilot 2 apps, network-traffic capture, man-in-the-middle attacks, and jailbreak attempts. On the hardware side: RF scanning from 1 MHz to 6 GHz, PCB teardown, component analysis, and RF-exploitation testing. The result: zero critical, high, or medium-risk findings. No evidence of data leaving the United States, no backdoors or unauthorized remote-access mechanisms, no unexplained RF emissions, no supply-chain tampering or counterfeit components. Ten low-risk findings and thirteen observations — app-config, session-handling, and wireless-hardening housekeeping. DJI's head of global policy, Adam Welsh, said the findings "confirm what DJI has consistently maintained" and urged the FCC to weigh them in the company's appeal, noting that more than 80% of state and local law-enforcement agencies that fly drones fly DJI.
Our take: This is DJI playing the one card Autel structurally can't, and it's the factual complement to Autel's legal one. Last week's Autel filing attacked the process — secret evidence, no individualized review, a Fifth Amendment Ralls Corp. due-process claim. This audit attacks the substance: an adversarial, retail-sourced, no-pre-notification test by a firm with government pedigree, and the airframe came back clean. But read the FCC's own rationale and the limitation snaps into focus — the December 2025 Covered List addition was an executive-branch national-security determination built on classified material, explicitly not a documented technical-vulnerability finding. So a clean technical audit doesn't actually rebut the thing the FCC said. DJI is answering a question the agency never formally asked. That makes the audit nearly useless against a commissioner already briefed behind closed doors — and devastating everywhere else. The audience for this report isn't the FCC. It's the federal judge who eventually hears the inevitable Administrative Procedure Act challenge, where "they designated us on secret evidence and every independent test since comes back clean" is a genuinely strong record. Autel built the legal scaffolding; this week DJI poured the factual foundation under it. The two filings are not competing strategies — they're the two halves of the case that gets argued in court next year. Track the full FCC picture on the US availability hub.
2. The FCC docket crosses 3,000 comments — and the real weapon is replacement-cost math
Last roundup we flagged the 460-plus reply comments in the Covered List docket after the May 11 deadline. This week, in May 28 coverage, DroneDJ put the broader DJI petition record north of 3,000 comments — roughly ten times the volume of a comparable FCC proceeding. The content matters more than the count. A fire-department battalion chief on the record: replacing a $7,300 DJI thermal drone with a comparable American-made unit runs about $25,000 for gear that's "less capable and less reliable." A roof inspector: swapping a $6,000 thermal drone for a domestic equivalent runs roughly $20,000 — against a backdrop of some 500,000 ladder-related injuries a year that drones exist to prevent. Commercial operators flying Air 3S platforms report "no viable option" for a domestic replacement at comparable cost and quality.
Our take: The comment volume is a headline; the unit economics are the actual ammunition. Every prior framing of the ban has been geopolitical — data, China, national security — and geopolitical framing is a political winner. What's accumulating in this docket is something much harder for an elected official to wave off: a documented 3×-to-4× cost increase for less-capable equipment, paid by sheriffs, fire departments, roof inspectors, and one-person video businesses in every congressional district in the country. That quietly converts the ban from "tough on China" into "an unfunded mandate on your local first responders," and the second framing is the one that generates angry constituent calls. Commissioners don't move because a Chinese company submitted a clean audit; they move when members of Congress start asking why their county's search-and-rescue team can't replace a drone. The audit in story one is the supply side of DJI's argument — here's the evidence. This docket is the demand side — here's who gets hurt. Of the two, the demand side is the one with a vote attached. For US buyers weighing whether to act now, the US availability hub tracks what's still legal to buy.
3. FAA locks down World Cup airspace — and DJI's missing geofence puts 100% of the liability on the pilot
Between May 28 and 31, the FAA — coordinating with DHS and DOJ — published the venue list, dates, and airspace dimensions for its FIFA World Cup 2026 temporary flight restrictions. The tournament runs June 11 through July 19 across eleven US host cities. On match days, the eleven host stadiums get the heaviest treatment: a 3-nautical-mile radius up to 3,000 feet AGL, closed to all aircraft including drones unless air-traffic control specifically authorizes. Twelve fan-event sites get a tighter 1-nautical-mile ring to 1,000 feet. As DroneXL noted on May 31, even Part 107 commercial authorizations stop at the stadium ring. The penalties are not parking tickets: civil fines up to $75,000 per violation, criminal fines up to $100,000, FBI authority to seize the aircraft with mitigation tools, and possible criminal prosecution and arrest.
Our take: This is the most operationally urgent item of the week — two weeks to kickoff — and it lands on DJI pilots in a specific, ironic way. In January 2024, DJI stripped automatic geofencing out of its US drones, replacing hard no-fly enforcement with advisory "Enhanced Warning Zones" the pilot can dismiss. That means a DJI drone will not stop you from flying into a World Cup TFR. The aircraft that used to refuse takeoff inside a stadium bubble now shrugs and lets you go, and the entire compliance burden has shifted onto the operator — at exactly the moment the consequences became felony-tier with FBI seizure attached. Here's the irony worth sitting with: the same federal apparatus that won't let DJI obtain new equipment authorizations is now depending on the pilot, not the drone, to enforce the most sensitive airspace of the summer — because the regulatory and political climate is part of what pushed DJI to abandon automatic enforcement in the first place. If you fly DJI anywhere near a host city this summer, the drone has your back on exactly nothing here. Check the TFR yourself, every match day, before you arm the motors.
4. Osmo 360 II: the rare new DJI product Americans might actually be able to buy
DJI's next 360 camera, the Osmo 360 II, cleared the FCC under ID 2ANDR-OQ0022512 with a grant dated December 9, 2025 — and that date is the whole story. The confirmed hardware changes are modest: a 2,150 mAh battery (up about 10% from the original's 1,950 mAh), Wi-Fi 6, dual-antenna MIMO, and an e-label touchscreen, with SAR and emissions testing passed. Leaked pricing clusters around $499–$579 for the base model and $629–$729 for an Adventure bundle, with a Q2 2026 launch that's now sliding toward the back of the quarter. Insta360's rumored X6 — widely expected to carry a 1-inch sensor — is circling the same April-to-June window.
Our take: Almost nobody is connecting the grant date to the ban, and it's the most important fact here. The FCC's Covered List rule is forward-looking: it blocks new equipment authorizations but leaves every product authorized before the December 23, 2025 cutoff fully legal to import, sell, and operate. The Osmo 360 II cleared the FCC on December 9 — two weeks inside the window. That means that, unlike the Pocket 4 Pro (revealed at Cannes and filed too late), the Osmo 360 II carries a valid US authorization and a real pathway to American shelves. In a year where every headline DJI launch — Pocket 4, Pocket 4 Pro, Lito, Mic Mini 2, Osmo Mobile 8P — has been a US casualty, the Osmo 360 II may be the one new DJI product of 2026 that walks in through the front door. The trade-off is that the spec leak reads "refresh," not "leap" — a bigger battery and little else confirmed — so against a 1-inch-sensor Insta360 X6 it probably loses the raw-image-quality war. But it wins the only war that matters for a US buyer in 2026: the one where the product is actually available. One honest caveat — a pre-cutoff grant clears the regulatory hurdle, but DJI still has to choose to ship it into a market it's been retreating from; until a US SKU and price go live, treat this as the credible optimistic read, not a guarantee. We'll be updating the 2026 product tracker to reflect the Osmo 360 II's US pathway, since it breaks the "every new DJI product is blocked" pattern that's held all year.
5. Pocket 4P pricing silence hits week three — and the audit just gave DJI a reason to keep waiting
DJI revealed the Osmo Pocket 4 Pro at Cannes on May 14 — dual cameras (a 20mm f/2.0 1-inch main plus a 60mm-equivalent 3× telephoto on a 1/1.5-inch sensor), 14-stop dynamic range, 10-bit D-Log2, 4K/240fps, ActiveTrack 7.0 — and pointedly withheld final specs, configurations, pricing, and US availability. As of June 1, eighteen days later, none of it has arrived. Pre-launch chatter still clusters around ~$700 base / roughly $733 USD-equivalent / 4,999 RMB with a June ship, none of it official. And because the Pro filed for FCC authorization after the December cutoff, US buyers are looking at gray-market import only — warranty-voiding, firmware-region headaches included.
Our take: Last roundup we argued the silence is the strategy, and three weeks in, the thesis is holding — but this week added a concrete reason to keep stalling. Eighteen days without a price is longer than the entire pre-order window of a normal consumer launch; DJI is eating real retail momentum on purpose. The OnDefend audit and the Autel filing are why. Pricing a flagship is a one-shot decision, and DJI is buying optionality: if the evidentiary push produces any softening — a commissioner statement, a procedural off-ramp, a shift in the comment-driven politics — DJI wants to set the Pocket 4P's configuration ladder after it knows whether a US-friendly tier is even worth designing. The cost of that patience is that the early-summer creator-upgrade cycle is being handed to competitors in real time. Read the silence this way: either a number drops within days, or DJI has quietly reclassified the Pocket 4P as a non-US, second-half story and is in no hurry at all. It stays "official pricing TBD" on our Pocket 4 hub until DJI says an actual number.
What we're watching next week
Five things on the radar for the week of June 2–8:
- Pocket 4P official pricing — week four of silence. Every additional day raises the odds the configuration ladder is being recalibrated around the FCC fight rather than the calendar.
- FCC response to the OnDefend audit — watch for any acknowledgment, ex parte filing, or commissioner statement that signals whether the agency will engage the technical evidence or stay parked on the classified rationale.
- Osmo 360 II launch + actual US availability — the pre-cutoff grant gives it a pathway; the open question is whether DJI ships a US SKU or sits on it. A US price would make it the first genuinely good 2026 availability story.
- Air 4 FCC equipment authorization filing — still missing. A summer launch needs a filing by roughly mid-June; silence past that pushes the sub-250g Air 4 into late 2026. See the Air 4 hub for the running picture.
- World Cup kickoff, June 11 — first match day, first live TFRs, and almost certainly the first enforcement incidents. Expect at least one high-profile drone seizure to make the news cycle.
We'll be back next week. For real-time tracking between roundups, the 2026 product tracker and US availability hub stay current.