I read that as it will default to false for everyone who wants security out of the box and only requiring those to open it remotely to set a config