Sort:  

It's not a great security measure if the default is to opt in. What is the reason for the default to be opt in?

That's true, I will include this in the proposal that the default is opt out