the ebuild should change /etc/make.conf to countain CONFIG_PROTECT="/glftpd/etc /glftpd/ftp-data" or at least it should advise the user to add this line. Otherwise you will loose all password information, laston, oneliner ... So an update without the config protect will seriously damage the server. I had an update, hopefully others also have one ;). It would be a good idea to add the entry before qmerge because i had the trouble when switching from a hand made install to the ebuild. You can not be sure you do nothing wrong, when you depend on the information portage gives you. Because someone may not use portage in the first place.
why is this installing to /glftpd/ anyway?
No, it is installing into /opt/glftpd and the env.d file has CONFIG_PROTECT=GLROOT/etc
You are right, i forgot to mention that i have set CUSTOMGLROOT="/glftpd". Anyway GLROOT/ftp-data should be protected too. Because you have all your welcome messages, oneliners, lostonline .. information in this folder. Also the default user and the glftpd user would be altered in case of update. So perhapt env.d file should look like this CONFIG_PROTECT=GLROOT/etc GLROOT/ftp-data
cat files/glftpd.env.d CONFIG_PROTECT="GLROOT/etc GLROOT/ftp-data"