Google has a very open culture, e.g. all documents/calendars/... are open to anyone by default. If it's private, you'll need to mark it as private and then nobody has access.