The issue is the “just works” philosophy. Most defaults are insecure and require technical expertise and hardening.