I was surprised to see that I could see other users’ documents.

TBH this is how I expected it to work. A shared family document repository. I’m not against having more granular permissions, though!