I think their point is that they don't know enough about the innerworkings (read: code) to be sure that turning off one feature doesn't enable far more security

I think their point is that they don't know enough about the innerworkings (read: code) to be sure that turning off one feature doesn't enable far more security vulnerabilities than existed when the feature was on... They aren't suggesting using compile flags requires code changes...