hm -- I see
AFAIK those "Defaults:" meant originally to pretty much duplicate on the value of the parameter which was originally in the config file (so if user changed them -- he had a clue what they were).  Now that we have .local/.d support and discourage users from modifying config files, they indeed might better carry the value what underlying tool (iptables or firewalld) has... and I see that majority of configs actually use them that way but some might need to be tuned up to pretty much either remove 'Default:' s where there is none, and adjust the rest to match... I am doing for few right away