We ought to be consistent across our Tier-1 and nearly-Tier-1 architectures, and enable Capsicum on the 32-bit Arm platforms by default.
If the Arm community agrees I will submit a request to re@ (or handle this after stable/12 branches, if that's the consensus).
PR: 204008