I've set up the confidential queue topics routing to confidential projects with very limited permissions and that has worked out well. The only issue that I see is that Request owners can edit their own Requests and copy it, convert to a project or task, add to Boards (user access level depending), ...