Regarding the --logfile-no-restricted-perms flag added in #3747:

@michaelsproul I think the flag help text is a bit misleading. When using this flag on Windows, the log file permissions are inherited from the parent folder (as expected), which does not necessarily mean "world-readable". It depends on the permissions set on the parent folder, which can be totally secure.

Originally posted by @ostracoder in #3747 (comment)