Function privileges and backward compatibility

With function privileges (or any other privileges we may come up with),
the natural default would be to grant access only to the owner.  However,
this would probably break every application in the world.

The compatible alternative choice is to grant all privileges to the world
by default, but that would seem to be kind of confusing to someone who is
not familiar with the history and compatibility concerns.

Do we need a umask?

-- 
Peter Eisentraut   peter_e@gmx.net