Plane enables public access policy for S3 bucket?

[NiklasRosenstein]

I'm testing Plane in my homelab; I'm a bit surprised to find it configures public access on the remote S3 bucket that I configure it with. From the plane-api-wl Pod:

Checking bucket...
Public read access policy set for bucket 'my-plane-bucket'.
Cache Cleared
[2024-10-09 06:30:36 +0000] [1] [INFO] Starting gunicorn 22.0.0

Since I was going to use an S3 bucket that is reachable over the public internet, it would mean all data I put into Plane that ends up stored in the bucket is publicly accessible by anyone.. First and foremost why is that happening (and by default)? And how can I disable it?