Many commercial and recreational UAS systems use MAVLink to communicate instructions and data between the Ground Control Station and the drone. We explore the security aspects of this protocol and what it means for assessing threats, risks and mitigations for drone operators.