I am all for bashing bad privacy options, but from the linked tweet at least, this IS off by default. I can certainly see enterprise scenarios where this feature is very useful for security reasons. Did I miss some context?

Edit: oh, this is in addition to the Mirror stuff. Yea this should never be a thing.