Actually thinking about this more, I am starting to understand the outrage. I think the commenters are right, it should be secure by default.