Anyone who has enough technical knowledge to have a reason to turn these on should be fine with about:config. The default settings should be secure.