I posted something similar in the other thread about this. This change probably kills Hacktoberfest imo. What maintainers would want to subject themselves to spam PRs by opting-in. Anyway, I feel like allowing PRs before this point to count as valid is a bad idea. I would guess that 70k people already submitted 4 spam PRs in their own repo by now following the tutorials that have been posted for this.