As far as I am aware the only way to actually tell if a particular Z-Wave device was paired in S2 Security mode, is to use the web interface, to look at its NodeInfo variable field and look for S’s in the string.
My production Vera Plus is on “Vera” not “Ezlo” firmware, version 1.7.5186 (7.31).
For example for one of my Fibaro Dimmer 2 devices, if I go in to its Advanced area and Variables tab, look for “NodeInfo” and click Edit.
If there are any S’s present in the string then that means this particular device has been paired with S2 Security mode.
If there are no S’s present in the string, then its not been paired securely.
