I suggest we could have the google drive access with different restrictions. Like you can set your restrictions as per organizations created. This is a big advantage to every workspace admin as we can more restrict our user depending on their department level.
example:
Org 1 - (google drive access + can share data outside the org)
Org2 - (google drive access + restricted to share data outside the org , only internal)
This exists today. Check out https://support.google.com/a/answer/10621317?hl=en
Hope that helps,
Ian