Netlify enable them on a per-account basis due to past abuses.
You’ll find this post relevant @quietbit and @CodingCossack