I concur, however:
That’s covered by long-standing Category permissions. Just use Category security features which have recently received some UI