In reply to Syed Balkhi.

If I remember correctly, the reason XML-RPC is enabled by default is primarily because of the WordPress mobile app. Well, here you go https://core.trac.wordpress.org/ticket/21509