Actually, isn’t this the optimal outcome? The new “security” features are now optional for those who want them. Everyone else can choose developer mode, has all the old features and is responsible for securing their network. We could argue if opt-in or opt-out is better but I see the argument for having “security” features enabled by default.