We live in a very privacy-reduced world, isn't it? Wouldn't it help if GNU/Mailman was by default shipped with DEFAULT_PRIVATE_ROSTER = 2 ...and let administrators reverse that if they wish ?