sharing over SMB

When sharing with Windows PC, and virtual machines, it seems in Ventura, full read/write access to ANY drive overrides the specific folders/volumes set when Firewall is "disabled"

That is, when Firewall is "Disabled" all I need is to check SMB for the account on a Mac as as long as "public folder" has full read\write acccess (set by default), then its not just public folder i have access to, its my enite network, including full access to external drives attached. (and i acess as Administrator.. not sure if that is the "reason" but anyway)

When Firewall it enabled, it works as expected. I only have access to the folders set in Sharing. I don't seem to rember this "by design" in Big Sur, did Apple change something ??

If so, i would still say its a security issue, not by the fact Administrators have access tio everything anyway, but by the fact its the specific folders/volumes are NOT listed in Sharing (as the issue)