that’s weird, that bulletin is from 2018. I installed 4.1 a few weeks ago.
And I tested with a USB mouse, and the policy works.
I guess the problem is because of the “unified” dongle, that can be a mouse and a keyboard and qubes allows it automatically.