The default rule is the rule of last resort, you don't modify it, you override it with your own rule(s).
Rules are applied in order until one matches, the default rule is the very last to be tried (assuming no other rule matched).
If you create an SSID firewall rule deny-any-any-any, it will effectively replace the default allow-any-any-any (which will never be applied).