When a new asset layout is created, it's automatically checked/allowed for existing security groups, even groups that only had specific layouts selected. This means new layouts can end up visible to groups that weren't meant to have access, requiring manual cleanup after every layout creation.

It would be great to have new asset layouts default to unchecked/no access for security groups, or at minimum, that this behavior be configurable so admins can choose whether new layouts are automatically granted or withheld by default.