Policies guide doing the right things. In the illustration, it stipulates the correct way to turn left or U-turn that normally in doing so will stay on the leftmost lane by default.
Similarly in the cyber world, follow the established policies and procedure to keep the digital systes secure. General practice is to eliminate default settings.
The only pitfall to follow the established policies and procedures is: if these are authored by credible and competent parties for practical deployment rather than relying on text book knowledge. Challenge the authors instead of bindly following. Only through this will enhance the overall cybersecurity posture and risk culture of an organization. Sadly, this is one of the spots involving human aspect that end users are always blamed as the weakest link.