Hacker News Reader

I believe it's because they just didn't bother trying this on Windows (yet)

Do you believe that, or do you actually know that because he said it somewhere?

If you look at the linux patch[1] it's a case of bad defaults. So maybe Windows just has good defaults?

I think "insecure default" or even "wrong default" is more fitting in this case.