developers would simply enable all access (and not even realize they could restrict access to authenticated users). So the default is likely much safer than wha

developers would simply enable all access (and not even realize they could restrict access to authenticated users). So the default is likely much safer than what would otherwise happen. That's not what "safer" means. You cannot say that that's what would happen, either.