Cloud permissions are just more complicated, which means people make mistakes like this. No one is intentionally setting their buckets to be world readable.