Major,

I tend to agree with you on defaults. I think that most of the time they're just set to something without a lot of thought about what makes the most sense.

That's where I think MS should improve. Make a conscious decision that makes sense most of the time. Not all the time, but for the inexperienced or non-DBAs, set things in the way that is more secure and provides a good general setting.

Then give guidance on which way things ought to be. Presumably there are people talking to DBAs, customers, etc. about issues, what works, what doesn't , and they can make some good guesses about what works 80% of the time.