The custom settings file will likely contain encryption keys and other sensitive data, so it's probably a good idea to tighten up the default permissions on it.