my hot take (in case you were wondering 🤣)
Django should work in production by default (and locally). It should WARN loudly and plainly so people know what settings to change for security reasons.
This is 90% of the settings pain in my book.
Configuring apps has it's own pain scale but most just work once added to INSTALL_APPS and that's what docs are for.