We are struggling with needing (expensive) Creator licenses for everyone that wants to fill out a survey (we are using ArcGIS Enterprise). We know the survey can be shared "publicly" such that anyone with the link can fill it out - this is the accepted workaround for acquiring Creator licenses, and could work. However, when data security is an issue, we would not also want anyone to be able to access the survey results. So while we might not expect any bad actors to want to fill out a survey and populate the results with bad data, we might expect them to find the REST endpoints and extract the results.
Is this security model built into Survey123? Normally with feature services if you have permission to insert, you also have permissions to access, since it's just GET and POST requests. So I'm unclear if/how Survey123 deals with this.
