ProxyHeadersMiddleware should not be enabled by default?

[vanschelven]

In uvicorn, ProxyHeadersMiddleware is enabled by default. When used in environments that are not behind a proxy, this opens you up for all kinds of security issues. See e.g. the plethora of warnings in the Django manual about a setting controlling a similar behavior: https://docs.djangoproject.com/en/4.2/ref/settings/#secure-proxy-ssl-header