The finance team uses a variety of third-party spreadsheet add-ons for reporting purposes. The organization wants to ensure that these add-ons cannot access data in Google Drive other than in Sheets. As the Google Workspace Super Admin, what is the best approach to secure Drive data without hindering the finance team's operations?