diff --git a/src/core/config/mod.rs b/src/core/config/mod.rs
index 89d48c6e..1c564c24 100644
--- a/src/core/config/mod.rs
+++ b/src/core/config/mod.rs
@@ -1305,9 +1305,8 @@ pub struct Config {
 	///
 	/// The authenticated equivalent endpoints are always enabled.
 	///
-	/// Defaults to true for now, but this is highly subject to change, likely
-	/// in the next release.
-	#[serde(default = "true_fn")]
+	/// Defaults to false.
+	#[serde(default)]
 	pub allow_legacy_media: bool,
 
 	#[serde(default = "true_fn")]
diff --git a/tuwunel-example.toml b/tuwunel-example.toml
index d43a0f79..ed10041c 100644
--- a/tuwunel-example.toml
+++ b/tuwunel-example.toml
@@ -1126,10 +1126,9 @@
 #
 # The authenticated equivalent endpoints are always enabled.
 #
-# Defaults to true for now, but this is highly subject to change, likely
-# in the next release.
+# Defaults to false.
 #
-#allow_legacy_media = true
+#allow_legacy_media = false
 
 # This item is undocumented. Please contribute documentation for it.
 #