Because Facebook know very well that people don't read things, they should but they don't, and they take advantage of this. The point is it shouldn't default to public (which it does if you've never touched your privacy settings which previously defaulted to public).