By no means should you just use prospector as is. The defaults are pretty good, but if you have a huge project it'll make more sense to do a little configuration, and most of the tools that prospector wraps are configurable. I for one don't use the default lint configuration.
I'll look into it, but my settings file always has a fake secret key in it (that will be overridden on production) to cut down on the amount of configuration needed for new dev setups.
I'll look into configuring it, but having to # noqa a bunch of lines isn't ideal :-/ Hopefully it won't get to that.