That's just the nature of giving someone access to private content though. Even a single user could mirror everything to a public space and completely ruin everyone's day. You just have to take into account that you're giving access to the user AND the instance admin when approving a request, and that you trust them to do the right thing.