I can’t reproduce this. For instance, in the system created with: guix system vm gnu/system/examples/bare-bones.tmpl
‘umask’ returns 0022. Could it be that your user accounts have shell startup files like ~/.bashrc that specify a different umask? Thanks, Ludo’.