They disabled it by default after shipping it as a security nightmare in preview builds.

You can’t add security after the fact. If it isn’t planned out with security as a primary design goal months before you write a line of code, it will never be secure.