The default list of blocked user agents was compiled based on historical blocked attacks data and online resources. I agree that for those who use wget to automate things having it there by default is very moderately inconvenient in that you need to remove it or work around it. For the majority of people using our software, through, who do not automate things with wget or who do but dp pass a custom user agent to wget (as per best practice) the default list is safer.
What I mean is that you can always pass --user-agent="Supercalifragilisticexpialidocious/1.0"
to your wget command line to make it pretend it's Mary Poppins instead of wget — you can of course use a different user agent if you're not a fan of classic Disney musicals. This way you can leave the default blocked user agents string which will cut off a lot of lame attacks by script kiddies who blindly follow online “hacking” tutorials without understanding what the commands they run actually do 😉
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!