Would agree with this. I have witnessed a smaller private group have stuff leaked and scraped, which was interesting yet petty drama but the more important angle that relates to what you’re talking about is that bad faith actor was removed and now fewer people get full access.

I think that’s the way most groups are going to lean, “quarantined” initial access that opens up after whatever metrics they deem important.

Of course you can’t prevent all bad things from ever happening, but it’s enough to deter mindless web content scraping bots and such!