Private by default with option to make it public seems is a great idea. I think it's all about providing visibility setting. In between - where you report it to trusted delegated party is what would be default for me.