Is mainly an observation,
Don't know if this was intended.

When shared folder mount points are created in VMware products, any User can
immediately access the shared folder and its contents, which is particularly
notable since the recommended mount point has been a subdirectory of, or /mnt/
itself which requires root permissions.

Noted
That vmhgfs-fuse does have the mount option "allow_others" to allow expected
shared folder access.

Personally I have no issue with tighter security except that <maybe> this makes
less sense here and should be similar to how VMware products set up.

Although I have not attempted, I would expect that if the User instead mounts
the shared folder where he has access permissions (I'd maybe recommend a
subdirectory of the User's Documents folder) there would not be a permissions
issue but this would probably suggest revising generally available
documentation and guides.