If a cluster is started after "shutdown cluster" it will wait for all members of the cluster to be back before enable state-transfer and allow changes.

It should be a configuration to keep endpoints disabled until all cluster nodes are back as there are some environments where a smaller number of nodes is not able to handle the load.

It will prevent as well from any inconsistent change in the meanwhile.