do I need to change the default database prefix?

If it is easy to do, best practice is to have all wordpress installs use their own DB. Yes it is mainly for security, but it also simplifies tasks like importing and exporting sites.

If you must have several sites on one DB, then all of them have to have different prefix, and there is no other option, no matter if it is goor or bad for performance.