Remove unnecessary readFilter query, as it's filter applies to the whole module, filtering out whole documents to read (such as _user._id filtering) and it doesn't make sense to filter out a document that the user just created;
Remove unauthorized data for read on a field-by-field basis, hiding the ones not allowed
WriteConcern Majority to match ReadConcern majority