Check your home folder permissions on macos, last time I checked mine were world readable (until I changed them). I was very surprised by it, and only noticed when adding an new user account for my wife.
I think this is a bad idea, because it means the permissions of any new folders have to be closely guarded, which is easy to forget.