> IMO it's only a matter of time until they "accidentally" enable some of this.

Yep, cleanup has to be scripted/automated, and this script has to check periodically that the crap is still disabled.