Add a system level setting to default Custom Field Guest Visibility to Off. Currently, all new fields are set so that guests can see them by default and this is risky that you create a new sensitive data field and forget to check/change it to off. It would always be better to have it the other way around where you realize that the field is not visible and knowingly choose to turn it on.