Security Issue: View Access in Another Org

I got the above email from Figma. This is a file I have View access in another org (our parent org), and for some reason for vendor request for view access I got email in my inbox to Approve/Deny.

Seems like a big security issue.