Yes the standalone PostgreSQL appliance has remote connections enabled by default. FWIW we figure that most users would expect remote connections to "just work" OOTB in the standalone appliance. Because of that, it's much less likely to be a security risk without value as it may be on other apps in our library.

Enabling/disabling remote connections is probably a good Confconsole plugin candidate though?!