I think it used to be the other way around.
When policies where not setup on our domain windows 10 liked to complain about not being able to open apps using the built in administrator account - if they have re-enabled it, that is a security hole, surely.