I was leaning that way because I thought it would be nice to make the ACL object standalone and not tie it to the Bucket.

I will file an issue about this to discuss the API.