To ensure customers can access only their cases, including those created on their behalf, configuring a sharing set in the Experience Cloud site is recommended. This grants site users access to case records associated with their contact, ensuring secure and appropriate visibility in line with the requirement.