SP4: ACL on templates: By default they inherit fomr the home page of the site?

Fresh build. I validated the home and created a new "Steven" user. I assigned to him some RWA on the home page properties. Then with root I went on the admin center > template module. While checking the rights on the templates, my Steven users was automatically added to the ACL tree of all templates.

Correct behaviour? By default there is the group guest so this should be enough.. Why do we map the templates ACL on the ACL of the home page?

Looks like there is a bug here.

To ckeck also with portlets if there is the same behaviour (but they are on the server settings with no ACL by default so perhaps the problem does not occur)...