Good rule of thumb. Do not make changes to COS 1, that is the default value for COS when adding a new extension. I always make it the most restricted COS. Do the same with all the defaults. I believe it is the best practice.