According to the Optimizer report, we should immediately change the default external access for more than 100 objects.
However, if I go to Sharing Settings and click Edit (which is the way to go according to the help documentation), I can only change the internal access, not the external access. Almost - but not all(!) - external access entries are not editable. I am the sysadmin of the org (with the default system administrator profile).