Thank you! That's good to know. I think the default 'everyone' is too lax and I'd prefer to be able to post some messages which only the recipient could see, but limiting to 'friends' is better than nothing.
Notice also that this setting controls your feed, but how do you know what the settings are for somebody else? It may sound paranoid but I'd like to get a warning somewhere saying who is going to see what I write.