External sharing good practice

We have Site Collections for our Departments and Teams but never allow external sharing on these. We create separate 'Collaboration' Site Collections with external sharing enabled for each 3rd party we work with and also limit the Domains which can be shared in order to enforce this. We're a highly regulated organisation, so we have to be careful about what we share and have these steps in place so sensitive content isn't accidentally exposed to the wrong people.