The previous umask of 0027 was due to historically used setups with
different unix-users per list. We are not aware of anyone still using
this, and want to avoid accidental read permissions on gpg private keys
through the permissive umask, so we change the default.