Multi-user android phones should not list other user's file systems in the download location options

[ThibaultVillèle]

Plan : Family plan (doesn't matter, or at least shouldn't matter)

Country : France (same as above)

Device

Fairphone 4

Operating System

Android 11

My Question or Issue

For at least a few years now, Android supports multiple users on the same device. Notably, the Fairphone developers have enabled it on the version of Android they distribute to end users. For me, it's handy because I can have a Work profile (regular user, not managed but simply dedicated to work) and not have to worry about work emails/stuff whenever I go back home.

Upon logging into spotify on my work user profile to listen to some tunes, I discovered all user-specific download locations are available on it. Meaning I could save local copies of songs to my other user profile's dedicated Spotify storage. The locations listed are both labelled "SD Card" (already weird enough) and follow paths akin to "/data/{some user denominator}/10/com.spotify.music"

I don't think this should be possible. Would it be feasible to filter out the paths not accessible by one user ? Because I don't think writing two account's downloads to the same location would work ...

There's also a path accessible under "/storage/emulated/10", but I think this might be the root filesystem of Android (?). I've not brushed up my Android architecture knowledge in too long to say for sure.