The other person commented that the UI didn't suggest using folders over files. Why would it? That's up to your specific workflow, and using folders or groups is general advice for bigger organizations.
How you verify access is something else entirely, but the same advice helps in that case too.