I think that if permissions are relaxed to open up RSS further, it will start to "leak" information.
As currently implemented, you must have check-out permission in order to get RSS information
about check-ins, and you must have the ability to read wiki in order to get an RSS feed about
wiki, and you must have the ability to read tickets in order to get RSS data on tickets.  This seems
like the right level of permissions to me.