Why is an unconfigured Feign client (no timeout set) dangerous under real load?

It ties up the calling thread indefinitely if the downstream service is slow but not crashed — under real concurrent load, this exhausts the caller's own thread pool, turning one slow downstream dependency into a cascading outage of the caller too.