You would see a huge influx of bugzilla entries of "Firefox is broken" if hard fail was the default.
edit: the checkbox in the validation subdialog (ocsp.xul) is tied to security.OCSP.require, which is set here with a default of false in the Firefox source: http://dxr.mozilla.org/mozilla-central/source/netwerk/base/p...