On every join, I take the latest map data, re-encrypt it for the new MLS group state, and sends it as a signed checkpoint. This gives new members the current map without exposing earlier private history. Not sure how this scales but I think private groups don't need to talk about big datasets.
https://github.com/zeSchlausKwab/earthly/blob/master/src/lib/private-workspace/checkpoint.ts
https://github.com/zeSchlausKwab/earthly/blob/8e65fa790711f91abd5ebd2b77a8d1c0a765b64c/src/lib/private-workspace/service.ts#L934
