Just realized I had not set S2 keys in ZST39 LR setup

Hardware
1

I’m running a Z-Wave network with about 36 devices currently and looking to add another 6 or so short term, probably another 10-20 longer term. Current project is adding Zooz ZSE42 (800) water sensors along with the Zooz Titan (700) water shutoff valve for water damage protection. In the course of adding the first few sensors, I realized the S2 security was not being set up and just now checked and realized when I set up the controller stick, Zooz ZST39 LR (800) about a year ago, I forgot to generate the S2 keys! I just did that, but am not sure what I should be doing as next steps. Couple of questions:

  1. The ZST39 LR is on firmware 1.20 according to HAOS Z-Wave integration. I have not updated the firmware since I first installed it and I see the warning about firmware based on SDK’s before 7.22.1 are buggy. I think that is firmware 1.5x, correct? Should I update it? Last time I looked it seemed like the recommendation was not to update unless experiencing issues.

  2. How can I identify which current devices are S2 compatible? Is it worth resetting devices, etc to enable S2?

  3. If a device is already included and setup, what do I need to do to enable S2 level security? I