this latest one is annoying because best practice encourages restricting access to all, then granting access on a case-by-case basis as needed, as opposed to granting it to everyone and restricting on a case-by-case basis. The former is a lot more secure!