Comment 38 for bug 48734

@Colin, Mark: What about Principle of least privilege? Safe-by-default?
Why does user www-data (for example) have access to my files?

The defaults provide access to way more than other humans. You might at least want to use ACLs to limit it to other humans by default.

It should be clear by now that some users expect a private home dir. Why not provide an easy way to switch from private to public?