The more I read Thomas's response, the more I find I agree with it.
I don't have (or at least don't think I have) the legal privacy concerns
he does, but there's no question this does touch a sore point with me.
 
Thomas, would you be comfortable with a restriction of REVIEW that only
allowed list owners and the local postmaster to get the user lists?
Anyone else would only get the list header?  That would seem to at least
ameliorate the privacy issue, and if it were made an installation option
whether or not REVIEW was restricted this way, then people who wanted to
could leave REVIEW as it works today.
 
I.e., provide something a site could change in LOCAL SYSVARS to make the
REVIEW command enforce SHORT unless the user was the list owner or a
local postmaster.  Eric, could you put that on your list of things for
(dare I suggest it, 1.6 instead of 1.5o)?
 
Richard