I don't think it's on by default: I got an alert to enable it and then another warning when trying to load my own script.