Best Practice of file and folder sharing in teams

Good day,

While I was reading on best practices for file and folder sharing in teams. I read this:

"For scenarios where a SharePoint site is used with Teams, we recommend doing all permission management through Teams. " https://docs.microsoft.com/en-us/sharepoint/modern-experience-sharing-permissions

How is it possible to reach that? Actually, users that have the rights can simply right-click on a file, choose "open in sharepoint" and make changes in there. Because of that, we are slolwly losing control of our environement. For exemple, we have somebody that received some access in sharepoint but we do not know hos it happened.

Thanks in advance for your help.

Cheers