> Should we discard the entire Unix security model and chmod all files to 0777

It depends, but for most use cases... yes, actually.