We work with clients and ask them to sign-up for Vercel. We usually handle deployment and keep the site on our Github account as they are not tech savvy. The issue is that their Vercel account can see all of our repositories that are able to be added. Although they need the .env to deploy properly, I would love it if they couldn't see the other projects we have worked on.