public directories file permissions

I noticed a very and I mean very sensitive file in the /logs/config directory with 644 permissions.

Isn’t this a security hole?