In this case though I think it might be worth the trouble to break compatability for the security gain.
Well this whole thing, along with the uproar in the other thread, is all about security. Well, off by default would be the more secure thing to do. Breaking scripts is irrelevant.
