> More importantly, we hope this serves as a reminder to all tool developers: explicit trust should be the default.
... unfortunate choice of words.
Let's say: Distrust should be the default.