[anarcat]

as mentioned in the fine article, it looks like many distros patched this out already, for some reason. Debian has that default flipped since Debian squeeze, published in 2011:

https://sources.debian.org/src/xterm/261-1/debian/changelog/...

so yeah, kind of a big deal, except not really, looks like some folks were already careful with that possibly dangerous setting. :)