checkout: change default strategy to SAFE As per #4200, our default is quite surprising to users that expect checkout to just "do the thing".