More Granular User Permissions on Contact Records for' View Only' Access - Attachment & Notes

Currently, if the Super Admin restrict the Contact/Company Owners to View Only access, those restricted users are still able to add Notes to the Contact Record and also open up attachments. 


As some of this information should only be privy to selected users, it might be a breach of confidentiality - information becomes accessible to other members of the organisation.