I've just noticed today, that having set up docs and chats in spaces and lists, they are suddenly accessible by limited users - even though they don't have access to the spaces and lists these docs/chats sit in. That means that secure information is suddenly available to people who shouldn't be able to see it. For the docs, I could go through every single affected doc and reset all the permissions, but I really shouldn't have to as I expected the location to take care of that. With chats, there's no option to change the access (as you'll see people complaining about in the feedback). This seems a very odd setup for a platform that works so well everywhere else for access and security.