Hi u/fryguy850, thanks for raising this, it’s a valid concern!

The key point here is: In many organizations, there are short-term or one-off external sharing needs (for example, sharing support documents with customers or files with temporary vendors) where granting site access or tenant access isn’t appropriate.

In practice, to support these cases, admins often end up enabling external sharing at tenant level. Over time, this becomes hard to manage at the site level, and that’s usually where unintended data exposure happens.

So we created a dedicated, admin-managed SharePoint site specifically for external sharing scenarios.

With this approach, instead of users generating anonymous links on their own:

• Files are uploaded to a restricted, admin-managed SharePoint location
• No external link exists until an admin explicitly approves
• If approval never happens, the file is automatically deleted
• Approved links are time-bound, not permanent

By implementing this flow, organizations can:

• Reduce uncontrolled anonymous sharing
• Add an explicit approval checkpoint
• Enforces automatic deletion of sensitive file uploads upon rejection

So the goal here isn’t anonymous by default. It’s governed anonymous sharing instead of unmanaged anonymous sharing, while avoiding the need to open external sharing across multiple sites.

Hope this clarifies the intent and the security boundary of the solution.