This is a mechanism vs policy argument.
Defaults count. Elsewhere I've said that I prefer to start with rigid guarantees and relax them. Default policy matters because in practice:
* The documentation isn't read.
* Even when it's read, the documentation may be incomplete.
* When it's read and complete, the crucial segment may be skimmed.
* When the documentation is complete and the crucial segment was read, it may have been misunderstood because of unclear writing.
* When the documentation is complete and the crucial segment was clearly written and read, it may be forgotten later on.
Then a new DBA or programmer arrives, and the whole thing starts all over again.
Safety mechanisms that require active effort above the baseline configuration do not work very well. Saying "there is a great mechanism" does not describe the actual properties of the actual system. The default policy is the policy that counts, because a single omission will reintroduce it.
Windows XP, buffer overflows, botched system deployments and so on all have a common property: they require positive effort by humans in order to rise above their baseline safety/security/reliability profile. There is no failsafe -- they only work by constant vigilance.
I don't see that as a good thing.