I don't trust a config file that doesn't enforce quotes around strings. it's a footgun especially when it collides with ill-defined boolean

I think you missed the "typeless" idea. That basically means every value is a string and so it's up for the application to parse and validate.