User in publish instance getting access to all the paths

Hi all,

Why everyone group has read permission to all the paths in publish instance? I can understand why permissions provided for anonymous groups as end user will anonymous and not authenticated.

The Problem I am facing is, if I create a group with read access to particular content path in author and activate it to publish instance, in publish instance it will have access to all the paths (because it will be part of everyone group)

What's the better way to create user in publish instance (consider multiple publishers) instance with access to particular content path?

Please suggest.