I prefer to have them hidden by default. This was mentioned up-thread with no decision, it seems the standard is ambiguous. MS SQL appears to have flip-flopped on this decision [1].
pgsql-hackers by date:
Соглашаюсь с условиями обработки персональных данных