Unfortunately, this option is about to false by default in old releases, meaning that each one past Log4j releases since 2.10.0, when this feature was added, are vulnerable by default. Having the latter choice is much more handy, because it lessens the chance of shedding essential knowledge. That's
