3.4.1 A client should not automatically accept inbound file transfers.
3.4.2 If the client provides an option to automatically accept file transfers, its default setting must be to disallow automatic accepting of file transfers.