Why are MCP23017 (port extender) input pins high by default?

What has this got to do with the original question?

Yes you can enable pull up resistors in code. But then the default value is all ones not all zeros as there is no internal pull down resistors.