This is probably going to be the case for most professional devices that have CLI configuration and expect the user to be familiar with networking.

They don't know what you're going to use it for and in real networks, the sensible home default of "allow outcoming deny incoming" doesn't usually make much sense. You're probably going to have dedicated firewall devices somewhere else in your network.