Permissions to dataflow workspace through Microsoft Excel

Since September it is possible in Microsoft Excel to connect to Power BI Dataflows, which is a great feature. Today we found out that colleagues, without permission/access to the workspace with dataflows, got access to the dataflows through Excel. This seems to be a leak in my opinion.

Does someone else experience the same? 

Thanks!