Oh, my bad - it was the default config in Debian package that got changed. I assumed it originated from upstream, but I was wrong and it's actually patched by Debian maintainer:

http://deb.debian.org/debian/pool/main/e/ejabberd/ejabberd_1... (debian/patches/ejabberd.yml.example.diff)