Disable wadl by default

After deploying our jersey 2.40 application we noticed some exceptions around jaxb.
It led to the out-of-the-box enabled wadl endpoint.

Because our REST API consists of both public and private endpoints, it was surprising to see that the application.wadl is just open for everyone to see, including private endpoints.

Wouldn't it be better to disable wadl by default instead?
With OpenAPI nowadays, the wadl endpoint probably isn't that useful either. Apart from it being unexpected that it's enabled by default.