Hi all.
I'm trying to understand how users get access to Jira Product Discovery. I have a user who does not have app access to JPD and is not a free user (does not have the Contributor role).

However the user can still view and access JPD spaces that are Open and can seemingly act like a Contributor by adding comments, etc.
Reading more about how roles work, does this mean that all Jira users are implicitly Contributors in JPD spaces that have an access level of Open or Limited even though they are not explicitly assigned the Contributor role by an admin?

This is problematic as we typically need to grant external vendors/contractors access to Jira but don't necessarily want them snooping around our JPD spaces. Seemingly, the only way to block access is to set the access level to Private.
Is my understanding correct?