If you don't trust someone to be the gatekeeper of the group, you logically should not trust them to view your information at all: they could always copy it and forward it on to other parties.

Maybe there's a difference if you do not trust their competence, rather than their intentions. You have recourse there, though: it's easier to test (or improve) someone's competence than to do the same for someone's intentions.