i had a word with my hosting provider (CW) and he suggested running a search by running the command find -perm 777
all i see is only the storage folder has this issue.
i am changing them to 775, if the flarum team come across this discussion just reply it is okay or not or i need to set it to 644 or something (few of my flarum files are set to 644) really confused.