Default should be off for those two options. Firewall can interfere with existing setup that most people will have and AV is not required for me.
AV isn't installed by default and require to use the command wo stack install --clamav.
The firewall is only configured on initial installation, not on upgrade from a previous WordOps release or from EasyEngine.
wo stack install --clamav
Hosted by VirtuBox