You don't need a mobile-services.json for device security

but is required for certificate pinning https://docs.aerogear.org/aerogear/latest/device-security.html#certificate-pinning-security

Proposal:
Leave 'downloading mobile-services.json' section in the doc, but with following note

If you do not intend to you certificate pinning, you can skip this section.