In my opinion, if config.default.php should be updated with FreshRSS update, it does not belong to user data, and hence should not be present in data directory. It should be along the code, somewhere else. In my case, the data directory is outside FreshRSS's directory (and symlinked) to that I can update FreshRSS source code without any risk of erasing my user data.