Currently, I can see the Shared Parameter Service parameters for any firm that I've ever been invited to work on a project on their hub. In turn, anyone I've invited to a project on my hub, they can see my firm's shared parameters on the Shared Parameter Service.
This should not be allowed, certainly not as a default. There should be a permissions setting that prevent external consultants from viewing company standards unless specifically given permissions to do so.
Ideally there could be a Parameter Collection that has a different permission set to allow externally invited consultants to view them (i.e., shared parameters for sheet sorting) but the other shared parameters should always be hidden.
This may become a non-issue once everyone bridges projects together, but that is years away, if ever, with how some firms do not embrace that method of linking projects and models.