1
Seems to be specific to the server... I also have XOOPS set up on DreamHost, and there I can change permissions on both mainfile and uploads to user only, and everything still works.