discussion at https://chat.google.com/room/AAAA_u92fRU/4JD7rS3FFjI

You don't need a mobile-services.json for device security

but is required for certificate pinning https://docs.aerogear.org/aerogear/latest/device-security.html#certificate-pinning-security

"Certificate pinning can be enabled in individual SDKs through the mobile-services.json file. "

Proposal:
Leave 'downloading mobile-services.json' section in the doc, but with following note

If you do not intend to you certificate pinning, you can skip this section.