When chaining transactions through multiple parties, I see that the final recipient party has the entire transaction history visible to them
This is even if I use a non-validating Notary and suspect that this is because BroadcastTransactionFlow invokes CoreFlowHandlers.NotifyTransactionHandler which invokes subFlow(ResolveTransactionsFlow()) and is resolving the last transaction in the chain to obtain the entire history at the final recipient party.
Is this accurate? Is there a design rationale for invoking ResolveTransactionsFlow to obtain the dependent transactions as a part of the BroadcastTransactionFlow. Is there a suggested way to protect this information as a Cordapp developer?