Got it. I trust Cryptomator. I trust syncthing. I also trust a notes app called ObsidianMD that accesses shared storage. I’m happy to give all of them full shared storage access.
What I don’t trust is other apps that I install to test, keep for a while and then later uninstall.
Those other apps are the risk I need to protect against.