...
When Sponsor selection is enabled during enrollment, consideration should be given to potential information release, in particular during anonymous or authenticated Enrollment Flows (Petitioner Enrollment Authorization is set to None or Unauthenticated User) where the Sponsor field is modifiable. In order for the Sponsor to be selectable, the Petitioner must be able to view available Sponsors. This effectively means any unregistered user can determine who the possible Sponsors are, and if any CO Person is a possible Sponsor, then the unregistered user can view all (active) members of the CO.
...