I'm fine with the safe-by-default being true. However, if that is the case, each connector implementation that support writes, will have to make sure to change the default value from the base class to "false", as long as it's using the _checkConnectorWritable_ method which will throw an exception if the connector is read-only.