I have to agree. "Insecure by default" is not a great design goal.