Personally, I think the list should be somewhere that *all* gcc maintainers have access to (not all of us have gnu.org accounts).
I agree that in principle, GCC "code maintainers" would need to check it after approving a patch of somebody who has no CVS access. But the FSF does not care about who can commit what and under what conditions, and in fact several maintainers (not random people who have access to the subversion repo!) are complete unknowns to the FSF because it's their employer who signed the copyright assignment.
The GCC "FSF-appointed maintainer" is the SC, and in fact several people on the SC have access to the list.
There could be privacy problems too. I don't know the relevant legislation, but the list includes personal data (year of birth, citizenship, employer) and, in Italy, I would have to sign a form if I had access to such data. The legislation in the US, however, is probably very different: for example, the copyright assignment form would have a separate signature, or a click-through if done via web, where you accept that the FSF keeps the data on a computer in order to process the assignment.
Paolo
