Hello,
I think the autolock feature should default to on. I’m new to Metamask and left it on my browser overnight. It was still unlocked in the morning and that freaked me out. Fortunately it was at my home and I didn’t have much funds nor lose any.
I’m relatively open on how long to make the default, but I do think this could help new users (especially those newer to crypto in general).