doas.conf makes things clear to me what I'm enabling.

And we have the OpenBSD folks focused on clarity and security.