I have seen examples of enabling CCCD by default in the forum but I have not seen anyone say it is not allowed according to the BT SIG.
https://devzone.nordicsemi.com/f/nordic-q-a/63606/enabling-notification-by-default/259327#259327
In the BT spec section 3.3.3.3 it says:
The default value for the Client Characteristic Configuration descriptor value shall be 0x0000.
Will there be any problem qualifying my product if I enable CCCD by default on a custom service and characteristic?