Yes, I'd noticed that. The ftp namespace is similar as well.
If you don't have /usr/web then anonymous users see
_everything_.