I think the answer might be documentation and tagging tables. Products like Kolide would likely programmatically restrict access to tables that were labeled with a privacy_caution score above N.