In my experience tracking protection breaks a lot of websites so I am not surprised it's not enabled by default