I agree these should be off by default. I’ve set up about 200+ wordpress sites for clients, only maybe three of them actually wanted comments of any sort.
I also agree that comments and pingbacks should be handled separately, however out of the box they should be disabled.