I didn't realize it needed to be enabled, either. But now that I think about it, it makes sense. Because if something like that is plugged into a network, it needs to default to a "Secure" mode first, and if someone enables network connectivity, they need to be in the password-entry screen at the same time they enable it.

Very sensible design decision.