If I install the FreeBSD port of drupal all my files are owned by the user the webserver is running under (www). This way Drupal is very capable of updating/installing new core and/or modules.
My question is: is it save(!) to have the files owned by *the user under which your Apache server executes? *