Comment 4 for bug 130531

modelines have repeatedly being a root cause of security flaws inside vim.
That's why they are *now* being disabled by default in debian.

imho:

If you want them, i suggest to activate them in ~/.vimrc

...and the doc should be updated accordingly.