It's not about costs, it is about providing secure defaults :) As long as you can turn it off, it's fine.