Supposedly it's off by default because loss of key is of a higher probability than theft. The software has supported encrypted wallets for years...