[danellis]

You should never have to do anything to become secure. The mantra is: secure by design; secure by default; secure by configuration.

[matthewdav]

In OWASP: It is important to understand that by no means does “Secure Defaults” mean turning off all possible network applications or sockets and services. And neither do Secure Defaults mean a 100% secure environment. But, they should ensure the least number of possible loopholes and fewer drawbacks.