It was using /var/tmp/composer/, now it places everything under a temporary directory that is removed when it is finished.
.get_default() returns string so make sure we're actually parsing the value as boolean and not evaluating a non-empty string in a boolean context (which will always return True)