Yes, that is "secure by default". It's a very reasonable claim to make.

This was a contrast to a fresh install of Windows which would get infected within minutes of being connected to the network (I'm assuming this is no longer true, but have never used windows).