diff --git a/0001-Remove-some-features-with-questionable-security.patch b/0001-Remove-some-features-with-questionable-security.patch
new file mode 100644
index 0000000..7e17602
--- /dev/null
+++ b/0001-Remove-some-features-with-questionable-security.patch
@@ -0,0 +1,45 @@
+From bc12001cb93b29799bc7cbbf963e4b793c008032 Mon Sep 17 00:00:00 2001
+From: Fabian Vogt <fabian@ritter-vogt.de>
+Date: Wed, 20 Mar 2024 09:38:27 +0100
+Subject: [PATCH] Remove some features with questionable security
+
+- Don't allow installing third-party themes from the store
+- Don't recommend to clear the kwallet password
+---
+ src/ui/Advanced.qml | 1 -
+ src/ui/main.qml     | 7 -------
+ 2 files changed, 8 deletions(-)
+
+diff --git a/src/ui/Advanced.qml b/src/ui/Advanced.qml
+index 8be5d81..3d05eea 100644
+--- a/src/ui/Advanced.qml
++++ b/src/ui/Advanced.qml
+@@ -36,7 +36,6 @@ Kirigami.Page {
+                     // to appear when the user checks the checkbox, not all the
+                     // time when the checkbox is checked.
+                     if (checked && kcm.KDEWalletAvailable()) {
+-                        autologinMessage.visible = true;
+                     }
+                 }
+             }
+diff --git a/src/ui/main.qml b/src/ui/main.qml
+index c30dd1f..e8b3bdd 100644
+--- a/src/ui/main.qml
++++ b/src/ui/main.qml
+@@ -34,13 +34,6 @@ KCM.GridViewKCM {
+             text: i18nc("@action:button", "Install From File…")
+             icon.name: "document-import"
+             onTriggered: themeDialog.open()
+-        },
+-        NewStuff.Action {
+-            text: i18nc("@action:button as in, \"get new SDDM themes\"", "Get New…")
+-            configFile: "sddmtheme.knsrc"
+-            onEntryEvent: function(entry, event) {
+-                kcm.themesModel.populate();
+-            }
+         }
+     ]
+     header: Kirigami.InlineMessage {
+-- 
+2.43.2
+
diff --git a/sddm-kcm6.changes b/sddm-kcm6.changes
index f025657..ef41641 100644
--- a/sddm-kcm6.changes
+++ b/sddm-kcm6.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Mar 20 08:44:42 UTC 2024 - Fabian Vogt <fabian@ritter-vogt.de>
+
+- Add patch to disable some questionable features (bsc#1217188):
+  * 0001-Remove-some-features-with-questionable-security.patch
+
 -------------------------------------------------------------------
 Wed Mar 13 09:10:41 UTC 2024 - Fabian Vogt <fabian@ritter-vogt.de>
 
diff --git a/sddm-kcm6.spec b/sddm-kcm6.spec
index 026a665..3df6ec5 100644
--- a/sddm-kcm6.spec
+++ b/sddm-kcm6.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package sddm-kcm6
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -37,6 +37,8 @@ Source2:        plasma.keyring
 Patch1:         0001-Support-default.session-symlink.patch
 Patch2:         0002-Read-and-write-autologin-user-to-etc-sysconfig-displ.patch
 Patch3:         0003-Don-t-add-a-Wayland-suffix-to-Wayland-sessions.patch
+# PATCH-FEATURE (?)-OPENSUSE
+Patch4:         0001-Remove-some-features-with-questionable-security.patch
 BuildRequires:  kf6-extra-cmake-modules >= %{kf6_version}
 BuildRequires:  pkgconfig
 BuildRequires:  cmake(KF6Archive) >= %{kf6_version}