T3275 introduced a situation where an undesired default behaviour (all conntrack helper modules being enabled) was kept through the migration for backward compatibility reasons. Since the default configuration is versionless, all migration scripts run on it back-to-back, resulting in the perpetuation of this legacy behaviour. Until we can find a better solution, we should hardcode the latest component versions in the default config files to make sure this won't happen on clean installs.