It sounds to me like the omission of an opt-out configuration is the entire technical problem. However, it sounds to me like the real irritant here is the presumption that omitting that configuration is in any way something that benefits the linux community. Defaulting it on is fine. The users who don't care to dive in, will then have it on, and the herd immunity to security problems is achieved. Telling long-time linux users that "what you want is wrong," is, shall we say, worrysome.