As long as the catalog is ISOLATED and bound to only one workspace you are correct. But you have the option to selective expose a subset to other workspaces and selective user groups if needed.