Folder permissions

[c0urier]

Just a little suggestion regarding folder permissions/owner.

Yesterday something sad happened to one of our Customers, he "had" a Webspell site which was targeted by some sort of cross-site scripting which resulted in his page + backup's to be deleted. Everything his virtual user "vu****" owned was gone.
This led me to think, wouldn't it be a good idea to make the backup folder owned by someone else or only give the user read permission to the folder and the files in it, since now with 1.0.3 we have the possibility to chose which backup type users should have.

I don't even know if this would secure the users from issues like cross site scripting and the lose of files.

**PS: No need for info about choosing a more secure CMS system .