Algernon:
Currently enabling or disabling does nothing since Thunar-Volman is not installed and you would also need to enable auomounting manually. It’s more like a 49 vs 51% decision.
So let’s not change it.
I’d even consider installing Thunar-Volman by default.
Depends on the kind of backdoor or malware and people actually looking for such files. There are certainly better and more complex ways to hide files. The usability impact probably depends on personal preferences.
Let’s keep them hidden by default. Usability will be worsened for most
users who get confused by much, much simpler things already.