Secure defaults are super important, especially on complex systems as people will not want to mess with the out of the box configuration too much when setting t

Secure defaults are super important, especially on complex systems as people will not want to mess with the out of the box configuration too much when setting things up. One additional consideration is that the secure defaults should be usable, otherwise the tendency will be to just disable them entirely (think SELinux and how commonly that's turned off as the first action on server setup)