Thin end of the wedge. It would obviously be opt-in, off by default, to start with. Then you swap that over for new installs, so that long-term users aren’t affected and don’t complain. Then you make it on by default for everyone, since most installs are on already and you might as well.