There are two options for managing your default branch.
Option A: you make the default branch protected.
Option B: you make the default branch public.
The issue I have with this is that you make this choice on database level. Ideally it would be possible that a Feature Service X has the default branch protected but Feature Service Y has the default branch on public.
Summary: select per geodatabase feature service to set the default branch to protected or to public.
