Even though the default startup already has `Trusted Source` and `Auto Run Python Scripts` off by default, when resetting their values to default (right click, Reset to Default) they would be turned on. It was simply missing explicitly setting this off by default. Pull Request: https://projects.blender.org/blender/blender/pulls/137205