No it should be secure by default and people will have to enable insecure features. It doesn't stop old software from working as the person will be able to simp

No it should be secure by default and people will have to enable insecure features. It doesn't stop old software from working as the person will be able to simply re-enable whatever the insecure feature is. However they will now be aware that said feature is insecure and should know the consequences of enabling it.