Having changed the default configuration of the product, we would expect that the vendor would have received trouble reports from other customers complaining about the less secure configuration. But they received only one such report. The message sent to this vendor was loud and clear default interoperability is more important than default security. Standardization Many organizations are under pressure to standardize on one set of applications, operating systems, servers, firewalls, and routers. Standardization can reduce your costs, but also reduces your resistance to catastrophic outages during widespread security events like the Melissa macro virus or the Love Letter visual basic script.
Biological analogies are useful here.
Genetic diversity increases the ability of the population to survive in the face of a virulent parasite or disease. Likewise with technology, if your entire organization is comprised of a single platform then your risk of catastrophic loss is higher. Many Web sites use ActiveX, JavaScript, Java, or dynamic HTML to enhance their pages often strictly for aesthetic reasons. But this use of mobile code has sometimes become part of the functionality of the site. Many electronic commerce sites, for example, require the use of JavaScript or ActiveX to complete the transaction.