The change of behaviour can have an unexpected and quite nasty side-effect, by applying a misconfiguration that was ignored until this update.
A setting of "UMASK 077" in /etc/login.defs was ignored before this update, and is now applied (as it should) leading to unreadable files if the user is not expecting it. In my case this was a misconfiguration, as I thought it was a setting applied only to the $HOME directory itself (I should have used "HOME_MODE 0700" instead). But since it had no effect until the recent update, I got taken by surprise with files generated with rw-rw---- permissions when I was expecting the regular rw-r--r--. I am not bumping the severity of this bug report because the new behaviour is the correct one, but it should be kept in mind that other people might get unexpected effects from this update.