https://www.wired.com/2017/02/encryption-app-signal-enables-video-calls-new-privacy-tradeoff It will be interesting to see which way he goes. I hope he sets a good example by assuring that the defaults are the safest one for privacy and/or the user is actively informed and required to express their preference(s). An extra step or two during install won't kill people. Overlooked unsafe defaults could.
Defaults should be set to absolute maximum. Give the user the control to lessen security, but pop up advice when they do so to make sure the decision is informed accordingly.