@elena @luca I think the answer depends a lot on how much trouble you want people to go through if they want to view it in a way that is not authorised by you.
In your situation, I would set the level at ”anything that you can do with a normal web browser without any plugins or special technical knowledge”, but I am not you, so this level might not be high enough. But I believe you need to think about what is acceptable to you.