I don't care much what happens during boot, but as soon as the service starts I expect it to do what I want it to do - at all times...
That's exacly, what I was about to suggest. This should give everybody the posibility to set his/her expected behaviour.
It should also not be too hard to implement, since the service is still running when locked and aparently already "detects" when it is locked. It just has to react accordingly...
This seems to be the next step.
Changing the hardware default would be a nice feature.
But please add the possibility to change the "software" default first.