Why are MCP23017 (port extender) input pins high by default?

or a resistor required

Yes.