Isn&#x27;t the second approach a bit like when you send a special link to access the document? Which leads to the obvious &quot;Anyone with the link can access the document&quot;-ness with that solution? How do you avoid that situation - that if the link spreads, you effectively lose control until you realize and remove the link-based access of the document?