Created attachment 2243 Proposed fix. The security/enabletcp property (called "Manage remote connections" in the settings dialog) should be disabled by default. The settings dialog also draws the related checkbox as unchecked if the property is not set. However, the code assumes to enable the feature if the property is not yet set in xfconf. The attached patch changes this assumption to disable this feature by default. Just for clarity: this applies only as long as the "security/enabletcp" property of xfce4-session is not set. Once it is set, it works as expected.
Checked in, thanks.