I would make it as unavoidably secure as possible, unless there's an actual use case for regular developers. If being extremely secure doesn't work for a particular server, then they might rethink why is that and fix it rather than make their app possibly vulnerable.