That’s a fair point, during the Facebook Cambridge Analytica scandal many had their info compromised even though they had never used it- because their friends had.
If access to all contacts is needed during the sign-up process then perhaps this can be adjusted for when Joint Accounts leave the labs for people who aren’t comfortable with this.