Are you serious? Just off the top of my head, how about... - Simplifying the initial setup? - Making the default configuration simpler to understand? - Dial

Are you serious? Just off the top of my head, how about... - Simplifying the initial setup? - Making the default configuration simpler to understand? - Dialing up logging to make your initial configuration easier to monitor / debug? - Performance options with security implications (e.g. ok if other parts of your infrastructure are up-to-snuff, but otherwise...)? The default configuration should be tuned to the needs of whoever is most likely to be using it. I have a hunch that's far more likely to be people using an Apache server (maybe even a web server) for the first time than people with extreme performance requirements.