"This setting is turned on by default, and you have to manually uncheck a box in order to opt out."

Assuming the off switch really works and isn't just a placebo.

Air gap machine is the way to go for protecting data.