If I install the FreeBSD port of drupal all my files are owned by the user the webserver is running under (www). This way Drupal is very capable of updating/installing new core and/or modules.

My question is: is it save(!) to have the files owned by the user under which your Apache server executes?