Soo, the point is to not enable features that undermine security, like using an FQDN as a key (or source of a key) and to enable features that reduce DoS, like a connection timeout. Does not sound like bugs, just like missing default options.

It’s still important to not use the affecting options.

Ability to export data to a relevant, open standard. If I can jump ship at the drop of a hat, then I’ll consider it. I won’t buy if I don’t have that power.