Ask HN: If target=“_blank” without rel=“noopener” is unsafe

Ask HN: If links with target="_blank" without rel="noopener" are unsafe, why is "noopener" not just the default?