I've never used TFS but my understanding is that TFS server allows you to configure it to only give a specific person access to a specific set of files. For ex

I've never used TFS but my understanding is that TFS server allows you to configure it to only give a specific person access to a specific set of files. For example: One could tell the TFS server "Deny Contractor-X access to all files, except for files A, B, and C". I assume that this would only allow Contractor-X to access files A, B, and C. Even if they were using git-tfs.