In ToDo,
when you are sharing a list, you need to send an invite to a person, and they need to accept it before the list access can be managed. The invited person can forward the invitation to anyone, irrespective of they are required to access the list or not. This may be a security concern.
The users must have the ability to manage access to a list even before its shared.
