"keep secure" should be ON by default for any new Service Plan.
We and many other companies sell "Reseller accounts", each reseller has its own service plans. We can't control how they create their service plans and if they enable "keep secured" in their plan.
So in that case, there should be a global keep-secured solution that has nothing to do with resellers' plans.
An admin should have the option to enable "keep secured" globally so that any newly created domain will be secured once it's pointed to the server DNS. Something similar is working flawlessly in CPANEL. CPANEL users basically do not need to actively install an SSL by Let's Encrypt. It is installed automatically.
By developing this feature, you will make the overall experience better. Hosting companies who are migrating websites constantly don't need to watch when the DNS will be propagated, it will however be done by the already existing cron job keep-secured.php.
Thank you for your idea! We will consider this functionality in upcoming releases if it will be popular.
Everyone, please continue voting for this feature if you consider it important.
-- PD