However, even though this is the most simple line of defence, it is still misunderstood by many.
In an administrator perspective, I need to re-teach users how file perms work when they find that other users can access files they thought were unaccessible.