Also worrying. With each new iteration, I try to go over my settings and make sure my profile remains as private as it was in '05, but there so many fucking changes and settings, I might just quit one of these days.
I wanted to write up a blog post on how to manage your privacy settings, but I couldn't figure out myself how to do it and that was what pushed me to finally deactivate the account.
You can deactivate your account when you sign off, then reactivate it whenever you want to do something with it. That way you are hopefully less vulnerable to their bugs and random privacy changes.
Pro tip: some settings reset to defaults when reactivating, so double check. A while back I found all of my notification settings reset to "email on everything" upon reactivating, and I think some privacy settings were different too.
Also worrying. With each new iteration, I try to go over my settings and make sure my profile remains as private as it was in '05, but there so many fucking changes and settings, I might just quit one of these days.