I'm pretty sure it's almost always a bad idea to make content served/executed by a webserver world-writable, even when there aren't untrusted local users on the machine...
Not sure who added that bit but someone fixed it it seems.
