Docker's default goes against best practices. Just look at all those opened issues on Github. Clearly people get caught by surprise and may suffer a security compromise as a result.

Docker is 100% to blame here and they need to change the default! Just put it in the release notes and get it over with.