ProblemThe default is ask-every-time, and there is no team-level ceiling, so it is a per-member decision that nobody makes deliberately.
TechniqueSet it to never allowed unless a specific workflow needs your own files. Note that personal Auto-review rules and this setting live on the current desktop and are not inherited by a second installation.
Why it worksIt is independent of everything the Bot does on the cloud computer, so turning it off costs nothing in the common case.
When to useDay one, on every desktop you install.
When not toA workflow that genuinely requires local files.