We’ve had instances of folks getting stump the other way - where they want cleartext in dev/test and forget to set the flag . We have a note in our docs to that affect
As of Android Pie, version 9, API 28, cleartext support is disabled, by default. Although
wss:protocol URLs are not affected, in order to use thews:protocol, applications must target API 27 or lower, or must configure application network security as described here.