Adding a value such as

'; DROP TABLE users; --

is accepted as a default value for a VFC property but it will break the VFC and cause tasks such as certify to fail