diff --git a/host/commands/launch/flags.cc b/host/commands/launch/flags.cc
index 2941a2c..49d34b3 100644
--- a/host/commands/launch/flags.cc
+++ b/host/commands/launch/flags.cc
@@ -64,7 +64,7 @@
     "The codename of the device's hardware, one of {cutf_ivsh, cutf_cvm}");
 DEFINE_string(guest_security, "selinux",
               "The security module to use in the guest");
-DEFINE_bool(guest_enforce_security, true,
+DEFINE_bool(guest_enforce_security, false,
             "Whether to run in enforcing mode (non permissive). Ignored if "
             "-guest_security is empty.");
 DEFINE_bool(guest_audit_security, true,