Whilst end users are free to configure the server as they choose we should at least log a warning to alert them to the fact their server has not been secured, if they want out of the box easy starts without security then they can ignore the warnings.

At least one other user has reported enabling security but the security not being applied, actually one of the steps to secure the server has been missed so the presence of a WARN message that disappears after correct configuration will also enable users to better see it is enabled.