I don't believe it's been tested, but if it comes down to a choice between a slow down or changing the defaults like this, I think we should go on the security side of things.

As such, assuming it is unreasonably slow, is there an alternative you're aware of? The implementation details for this particular issue aren't important.