Hello,
Just an idea, a friend of mine got hacked by dictionary attack. Somone had his secret guessed. And was auto added to white group. Which my friend had set as all access.
Not everyone know that and I think it would be more secure if white group (defualt one) couldn't have priviliges set. Only other groups.
Best regards