I suggest it depends on intent. If the intent is that the user must explicitly acknowledge that it is active then I would go for the positive approach. ...