I want to discuss the change of the default useragent string.
This string is signaled by the Asterisk in the SIP communication.
As the current default string is including the Asterisk and the FreePBX version:
The attacker know instantly how to attack the system in case of a know security issue with this FreePBX or Asterisk version.
That is why I think this should be change to another string per default.