Currently if you copy the URL from your web browser while viewing a proof and share it with someone else, it "logs" them in as you and uses your name when making comments. I know that you are supposed to utilize the "share proof" link, however, this is a very common action we have found our users trying to do - and is a huge red flag knowing that they can share this proof with anyone regardless if they have access to the proof workflow.
