No need to worry there, the notification pipeline always checks permission at the point we raise notifications.
So in this case no information would leak, we would just set the records up and if, by chance, the user gains visibility by becoming staff, they would auto watch.
Feels like this is mostly around improving the UX so it does not lie to the admin about what is going to happen.