Would anyone object to setting the default action to 'deny' on certain reliable low-fp URIBL lists? Probably Spamhaus SBL-XBL and DBL and URIBL Black. It seems like a new user turning on uribl checks would expect them to do something more than adding headers, as long as the services it rejects for are reliable. But this also means that anyone who was already using the plugin without setting any actions would see a change in behavior on upgrade.
-Jared