Your choice, at every step.
Review the whole visible-vault scope before publishing. Invite the Apple Account, then send its separate code. Ordinary invitations use iCloud participant permissions. Limited access adds seven-day expiry, ten opens and ten-minute sessions by default, with export off.
