And if someone gets access to a channel that they shouldn't?

The best norms around slack channels is to have most channels be public, but have norms where not everyone is in every channel.