Hope they have update on this soon as this is concerning privacy and high-profile contacts that we don't want other users in the same subaccounts to access or see even when they have admin permission. There should still be a granular permission where you can hide specific contacts, native and custom fields from users regardless of their role.