Actually, they are on by default still. Default values are determined by what PHP 
does without a php.ini.

Okay, so this is may in fact be technically-accurate, but perhaps not intuitive, since most users will likely use the php.ini and leave the default magic_quotes_gpc setting.

Your thoughts?

Your concern makes sense but this would get complicated fast, as there are two 
php.ini-* files with different values. And maybe a third will be added? And 
which do you consider the default?

I feel the default value must be the actual default value in php-src, and not 
from one of several distributed php.ini files.

Although in this particular MQ case, we should likely lose the "(it's on by 
default)" string because it may eventually be forgotten/wrong over time.

I see default as what works after base installation which usually includes a php.ini file - I just checked the 5.3.2 package and both php.ini files (php.ini-development & php.ini-production) have magic quotes off by default.

Your point about manageability is certainly relevant although that could also apply to every changed feature documented within PHP :)

But some directives differ between those two files, and in those cases, which is 
the default value?

At any rate, maybe I'm crazy, but I still think php-src dictates the default, as 
opposed to those two idealistic php.ini files.

No php.ini file is installed by default when you compile PHP yourself.

Many (all?) distributions however use php.ini-recommended/php.ini-production 
values for *their* default values.

It is not up to us to define what distribution php.ini values default to.

Default values are what PHP built-in default values (*without* any php.ini file 
what-so-ever) defaults to.

I do however totally agree that PHP should ship a php.ini file, which is 
installed by default, and uses the built-in default values.