ASVS-V10.4.7 If the authorization server supports unauthenticated dynamic client registration, it mitigates the risk of malicious client applications.

Verify that if the authorization server supports unauthenticated dynamic client registration, it mitigates the risk of malicious client applications. It must validate client metadata such as any registered URIs, ensure the user's consent, and warn the user before processing an authorization request with an untrusted client application.