Security you don't have to care about should always be the default, not only in the phone sector, as well as instant messaging, enterprise IT and storage. Nagging the user or the sysadmin doesn't work and most regular users don't understand complicated systems that need to be set up. On the other hand, ubiquitous features need to be explained and made safe by default, to avoid another debacle like the iCloud breach.
Android’s newest update is coming soon, with devices running 5.0 Lollipop beginning to ship November 3. While the visual update might be the one that most users pay the most attention to, Android 5.0 also has a number of under-the-hood changes, including some major updates to the overall security... http://techcrunch.com/2014/10/28/android-5-lollipop-security-features/