I think I agree with this:
I think it makes sense to add a new setting show_badges_to_anonymous (default: false) . Or (if anyone can think of a valid reason) show_badges_allowed_groups (default: @tl0). Maybe we seed the data to be backward-compatible for existing sites (default: true / everyone) respectively.
What’s your take @awesomerobot?