Secure by Default

A software security design principle requiring that system default configurations represent the most secure state, with any feature posing privacy or security risks requiring explicit user opt-in. Originating from Microsoft's 2002 Trustworthy Computing initiative, it has been widely adopted by security frameworks including OWASP and NIST.