It's surprising that it hasn't been default for longer. Why would someone want "off" as the default for the past several years at least.

What is the advantage of having it off, anyway? Is there a performance or security advantage for those who are not using it?