apk3 may create entries with 000 permissions

There are some users who have reported to me that apk very rarely creates directories with zero permissions. This is usually not reproducible upon subsequent (re)installation, the packages themselves have correct ones. I have no idea how to reproduce this properly.