I agree, this isn't privacy by default. The default settings are public. By definition, this is public by default.<p>That being said, I don't know if there is anything wrong with that. It's the changing of a user's settings midstream that's shady.