Streams — Permissions from external parties?

Has anyone using Streams encountered a situation where you have had to notify and get consent from involved parties for the calls to be livestreamed into a folder? Also, is it accurate to say that once we turn on the Stream feature then anyone within the organization could then be able to set up Streams and will have the potential to include calls outside of the parameters we set?