The infra team at my work is now keeping it on for new EL9 installs due to pressure from the security team, but for the past 10-15 years they kept it disabled.

I'm hoping it sticks. Just check audit logs when you get an error, it is not that hard, right?