@polotek
Because not everyone can be vigilant and aware.
The default should be the thing that best protects people and avoids enshittification , or at least the thing people expect to have happen. (People did not expect what happened at Facebook.).
@ThreeSigma people are definitely vigilant and aware. They literally found this guy and started yelling at him before he even turned the thing on. How is that less work than tuning your own server instance so it's not wide open?