Please apply security settings to Lists! We have a security group that does not have access to any financial information. However, when they make a list, BAM! Lots a financial info available to view.
If a user does not have access to the data, they should not have access to the data!