My post is correct but you're right. ACLs still aren't default and indedd stuff might break because of that lack of testing.