The primary benefit of setfacl and getfacl is that they allow you to grant privileges very discretely. You can set permissions on files and directories to match your needs and not grant any more ...

Linux is the most secure OS on the market for a reason. These are the security-centric commands you should have in your back pocket.

Breaking out of the traditional owner/group/world way of managing file permissions, setfacl and getfacl provide a lot of flexibility and fair share of complexity.