Disputed by upstream.
Vim ignores umask when creating a swap file resulting in
files that may be world readable or otherwise accessible in
ways not intended by the user running the vi binary. Vim
creates the .swp file according to the permissions of the
file being edited, deliberately ignoring the umask.
https://security-tracker.debian.org/tracker/CVE-2017-1000382