Well agreed that the share permissions are not as critical, but those should not have EVERYONE either in order to maintain better security.

It should be CHANGE and specific Groups only.

The wide spread of worms is often due to this EVERYONE on Shares lack of security. Using specific groups helps to prevent things like that.

Setting up proper SHARE and NTFS permissions would be considered a best practice regardless of how easy it is to just leave the stupid defaults.