I just want to add, anecdotally, that I have never needed to set all custom forms to system wide for access issues. I have never needed to individually share a custom form with anyone. I guess that these things are being inherited based on roles, groups, etc.