If you understand the rights and permissions then you have the tools to deal with your situation. If your resource does dump files and folders into properly designated places you should have no issue.
Zenphoto has the option of defaulting the "published" setting of new items to not plublished. It also has the option to make a gallery private.
But short of those two options, newly arrived items are public.
And of course, Zenphoto has no way of anticipating what users should be allowed to access a previously unknown item unless it is placed in an album that already has these restrictions defined.